CVE-2025-21176: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Exploitation of this vulnerability requires that an attacker convinces a user to open a maliciously crafted package file in Visual Studio.