---
id: "CVE-2026-121674"
page: "https://infrastack.ai/live/CVE-2026-121674"
kind: "vulnerability"
aliases: ["CVE-2026-121674"]
title: "PowerShell Core: sensitive data inserted into network traffic leaks information"
severity: "medium"
cvss: 6.1
epss: null
exploited: false
status: "open"
category: "runtime"
products: [{"name": "PowerShell Core", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["linux", "macos", "powershell", "runtime", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:31+00:00"
first_seen_at: "2026-11-10T19:25:09+00:00"
updated_at: "2026-11-10T19:58:31+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121674", "first_seen_at": "2026-11-10T19:25:09+00:00"}]
exploit_sources: []
---

# PowerShell Core: sensitive data inserted into network traffic leaks information

Link for people: https://infrastack.ai/live/CVE-2026-121674 (this .md is for agents)

Microsoft PowerShell Core inserts sensitive information into data it sends, so an unauthorized attacker on the network can read it. The sources give no further detail on which data or which conditions trigger it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:PowerShell Core affected range not listed fixed no fixed version listed

## How to check

- Run `pwsh --version` to find the installed PowerShell Core version.
- Compare it against the affected version ranges in the Microsoft advisory for CVE-2026-121674; the sources do not list them.

## Timeline

- 2026-11-10T19:25:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121674

## From the sources

Insertion of sensitive information into sent data in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_