Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-16802 EUVD-2026-48609GHSA-5vgj-hxp2-9grg

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local…

Published Jul 24, 2026 · Updated Jul 24, 2026 · Assigned by DEVOLUTIONS

Description

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.

Affected products

VendorProductAffectedFixed
Devolutions PowerShell Universal < 2026.2.3 2026.2.3

References