Local code execution via weak-directory dotnet commands

Command injection in Microsoft .NET SDKs and Visual Studio allows local users to execute code through dotnet commands in weak-permission directories. Microsoft has not published which dotnet subcommands are affected or how command resolution mishandles attacker-controlled directory content. Exploitation requires a user to run an affected command from such a directory; successful execution grants the attacker's code that user's access.