EUVD-2026-125777

Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server...

CVE-2026-129137

Devolutions PowerShell Universal version 2026.3.4 and earlier is affected by a vulnerability caused by incorrect default permissions in the agent configuration folder. This flaw allows a local unprivileged user to achieve arbitrary code execution as SYSTEM by providing a crafted agent configurati...