CVE-2026-129137: Security vulnerability

Published Nov 13, 2026

Updated

Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.

Event History

Nov 13, 2026

CVE Published

via NVD·10:17 PM

Data Sourced

via NVD·10:17 PM

DescriptionWeakness

Frequently Asked Questions

Who is realistically exposed to exploitation?

Systems running Devolutions PowerShell Universal 2026.3.4 or earlier are exposed if a local unprivileged user can modify files in the agent configuration folder.

What does an attacker need to exploit this issue?

The attacker needs local unprivileged access and the ability to place a crafted agent configuration file in the agent configuration folder. The crafted configuration points the agent to an attacker-controlled server.

What is the impact of successful exploitation?

Successful exploitation allows arbitrary code execution as SYSTEM.

CVE-2026-129137: Security vulnerability

Event History

Frequently Asked Questions

Who is realistically exposed to exploitation?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to exploitation?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?