CVE Catalog
CVE-2026-66378
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.
Risk Assessment
This could expose sensitive information about NuGet packages, violating access control.
Recommendation
Ensure repository read permissions are correctly configured and restrict access to metadata.
Original NVD description (English source)
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.