CVE-2026-16802 — Devolutions / PowerShell Universal

CVE-2026-16802

Devolutions / PowerShell Universal PUBLISHED

Description (CNA)

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.

Affected (CNA)

Vendor / product	Versions
Devolutions / PowerShell Universal	affected 0 before 2026.2.3

CWE

CWE-312

References

https://devolutions.net/security/advisories/DEVO-2026-0025/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.