Description
Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | PowerShell Universal | 0 <2026.3.5 | — |