Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
CWE-201