← CVE Intelligence

CVE-2026-3277

Devolutions / PowerShell Universal PUBLISHED

Description (CNA)

The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials

Affected (CNA)

Vendor / productVersions
Devolutions / PowerShell Universalaffected 0 before 2026.1.3

CWE

CWE-312

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.