CVE-2026-13437: Powershell Universal: güvenlik açığı

Açıklama (NVD)

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens serialized in plaintext in job API responses.

Özet bilgiler

Ürün

Devolutions Powershell Universal

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,44 (yüzdelik 38)

CWE

CWE-201

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• devolutions.net
• CWE-201