Security & compliance
Upholding the highest standards to protect your data and ensure trust.
DEVO-2026-0006
PowerShell Universal is affected by a cleartext storage vulnerability.
Affected Products
PowerShell Universal
before 2026.1.3
Change Log
Initial publication - 2026-02-27
6.8 Medium - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
OpenID Connect configuration stored in cleartext
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials.
Affected Products
CVE(s)
CVE-2026-3277
Remediation and Workarounds
Upgrade to PowerShell Universal 2026.1.3 or later.