CoreWCF Vulnerability in Unix Domain Sockets
CVE-2026-54776

4.4MEDIUM

Key Information:

Vendor

Corewcf

Status
Corewcf
Vendor
CVE Published:
8 July 2026

What is CVE-2026-54776?

A vulnerability in CoreWCF allows a service hosted on Unix Domain Sockets with PosixIdentity client credentials to accept connections that skip essential application/unixposix stream upgrades. This oversight leads to bypassing critical framing-layer identity checks within the UnixPosixIdentitySecurityUpgradeProvider. Following the identification of this issue, versions 1.8.1 and 1.9.1 of CoreWCF were released to mitigate this risk, ensuring more secure connection handling.

Affected Version(s)

CoreWCF >= 1.9.0, < 1.9.1 < 1.9.0, 1.9.1

CoreWCF < 1.8.1 < 1.8.1

References

https://github.com/CoreWCF/CoreWCF/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/CoreWCF/CoreWCF/commit/994431268e3362c...
x_refsource_MISC
https://github.com/CoreWCF/CoreWCF/commit/9af16955e51a573...
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.