UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-129137
Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-14T00:40:25.638091+00:00
- Cve id
- CVE-2026-129137
- First seen by Signal
- 2026-11-14T00:50:05+00:00
- Retrieved at
- 2026-11-14T00:50:05+00:00
- Published at
- 2026-11-13T22:17:24.043
- Last modified
- 2026-11-13T22:17:24.043
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph