{"id":"CVE-2026-129137","kind":"vulnerability","aliases":["CVE-2026-129137"],"related":[],"title":"PowerShell Universal: weak folder permissions let local users run code as SYSTEM","description":"Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.","summary":"Devolutions PowerShell Universal 2026.3.4 and earlier sets insecure default permissions on the agent configuration folder. A local user with no special rights can place a crafted agent configuration file that points the agent at an attacker-controlled server, and the attacker then executes arbitrary code as SYSTEM.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerShell Universal","fixed":["2026.3.5"],"affected":"<= 2026.3.4","ecosystem":"vendor"}],"ecosystems":[],"tags":["local-privilege-escalation","powershell-universal","self-hosted","vendor","windows"],"not_affected_if":["newer-version","no-local-untrusted-users","version-2026.3.5-or-later"],"how_to_check":"Check the installed PowerShell Universal version: 2026.3.4 or earlier is affected, 2026.3.5 or later is fixed. Also check the ACL on the agent configuration folder for write access by non-administrators; the advisory does not give the path.","fix":"Upgrade PowerShell Universal to 2026.3.5 or later (Devolutions DEVO-2026-0042). No workaround listed.","status":"open","published_at":"2026-11-13T22:17:24+00:00","first_seen_at":"2026-11-13T22:33:34+00:00","triaged_at":"2026-11-13T22:34:49+00:00","updated_at":"2026-11-13T22:37:19+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-13T22:34:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"PowerShell Universal: weak folder permissions let local users run code as SYSTEM","impact":"high","summary":"Devolutions PowerShell Universal 2026.3.4 and earlier sets insecure default permissions on the agent configuration folder. A local user with no special rights can place a crafted agent configuration file that points the agent at an attacker-controlled server, and the attacker then executes arbitrary code as SYSTEM.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["powershell-universal","windows","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM and runs arbitrary code","analyst_note":"Confirm the fixed version and default folder path from the Devolutions advisory; NVD text alone gives no fix.","how_to_check":"- Check the installed version of PowerShell Universal against `2026.3.4` and earlier.\n- Review the access control list on the agent configuration folder for write permissions granted to non-administrative users.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["newer-version","no-local-untrusted-users"],"who_is_affected":"Any Windows host running PowerShell Universal 2026.3.4 or earlier with an agent installed is potentially exposed, since the flaw lets a local unprivileged account escalate to SYSTEM. Systems where only administrators can log on locally, or where the agent is not installed, are lower risk. The sources do not say which default paths or agent roles are affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000746,"input_tokens":4547,"output_tokens":583,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Confirm the fixed version and default folder path from the Devolutions advisory; NVD text alone gives no fix.","search":"'-129137':15A,18A '-2026':14A,17A '2026.3.4':36B,93C 'agent':45B,59B,65B,86C,110C,116C 'allow':96C 'arbitrari':77B,103C 'attack':69B,74B,120C 'attacker-control':68B,119C 'code':10A,78B,104C 'configur':46B,60B,87C,111C 'control':70B,121C 'craft':58B,109C 'cve':13A,16A 'default':41B,82C 'devolut':33B,90C 'earlier':38B,95C 'escal':24B 'execut':76B,102C 'file':61B,112C 'folder':4A,47B,88C 'host':30B 'incorrect':81C 'insecur':40B 'let':6A 'local':7A,22B,49B,98C 'local-privilege-escal':21B 'permiss':5A,42B,83C 'place':56B 'point':63B,114C 'powershel':1A,26B,34B,91C 'powershell':19A 'powershell-univers':25B 'privileg':23B 'right':54B 'run':9A 'self':29B 'self-host':28B 'server':71B,122C 'set':39B 'special':53B 'system':12A,80B,106C 'univers':2A,27B,35B,92C 'universal':20A 'unprivileg':99C 'user':8A,50B,100C 'vendor':31B 'via':107C 'weak':3A 'window':32B","nicknames":[],"mitigations":[],"who_affected":"Windows hosts running Devolutions PowerShell Universal 2026.3.4 or earlier where an untrusted or low-privileged local user can log on. That user can write a crafted agent configuration file that points the agent at an attacker-controlled server and run code as SYSTEM. Hosts where only administrators log on locally can lower the priority. The advisory does not name the folder path.","tier":"B","verified":{"fix":{"at":"2026-11-13T22:37:19Z","by":"analyst","doc":"https://devolutions.net/security/advisories/DEVO-2026-0042/","run_id":3945},"products":{"at":"2026-11-13T22:37:19Z","by":"analyst","doc":"https://devolutions.net/security/advisories/DEVO-2026-0042/","run_id":3945},"who_affected":{"at":"2026-11-13T22:37:19Z","by":"analyst","doc":"https://devolutions.net/security/advisories/DEVO-2026-0042/","run_id":3945}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["powershelluniversal","universal"],"ptokens":["powershell","universal"],"labels":["high","localprivilegeescalation","powershelluniversal","selfhosted","vendor","windows"],"campaign_type":null,"search_a":"'-129137':15A,18A '-2026':14A,17A 'code':10A 'cve':13A,16A 'folder':4A 'let':6A 'local':7A 'permiss':5A 'powershel':1A 'powershell':19A 'run':9A 'system':12A 'univers':2A 'universal':20A 'user':8A 'weak':3A","search_b":"'2026.3.4':36B 'agent':45B,59B,65B 'arbitrari':77B 'attack':69B,74B 'attacker-control':68B 'code':78B 'configur':46B,60B 'control':70B 'craft':58B 'default':41B 'devolut':33B 'earlier':38B 'escal':24B 'execut':76B 'file':61B 'folder':47B 'host':30B 'insecur':40B 'local':22B,49B 'local-privilege-escal':21B 'permiss':42B 'place':56B 'point':63B 'powershel':26B,34B 'powershell-univers':25B 'privileg':23B 'right':54B 'self':29B 'self-host':28B 'server':71B 'set':39B 'special':53B 'system':80B 'univers':27B,35B 'user':50B 'vendor':31B 'window':32B","search_c":"'2026.3.4':93C 'agent':86C,110C,116C 'allow':96C 'arbitrari':103C 'attack':120C 'attacker-control':119C 'code':104C 'configur':87C,111C 'control':121C 'craft':109C 'default':82C 'devolut':90C 'earlier':95C 'execut':102C 'file':112C 'folder':88C 'incorrect':81C 'local':98C 'permiss':83C 'point':114C 'powershel':91C 'server':122C 'system':106C 'univers':92C 'unprivileg':99C 'user':100C 'via':107C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T22:17:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-129137","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129137","severity":null,"published_at":"2026-11-13T22:17:24+00:00","modified_at":"2026-11-13T22:17:24+00:00","first_seen_at":"2026-11-13T22:33:34+00:00","fetched_at":"2026-11-13T22:33:34+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-129137:3945","url":"https://devolutions.net/security/advisories/DEVO-2026-0042/","severity":null,"published_at":"2026-11-13T22:37:19+00:00","modified_at":"2026-11-13T22:37:19+00:00","first_seen_at":"2026-11-13T22:37:19+00:00","fetched_at":"2026-11-13T22:37:19+00:00","note":"Read Devolutions DEVO-2026-0042: fix 2026.3.5, affected 2026.3.4 and earlier, CVSS 4.0 8.5 (AV:L/PR:L). Advisory gives no folder path or workaround; not marked verified for how_to_check. No exploitation or PoC found; no social search done (local, low-profile).","cites":["https://devolutions.net/security/advisories/DEVO-2026-0042/"]}],"documents":[{"id":150674,"url":"https://devolutions.net/security/advisories/DEVO-2026-0042/","title":"DEVO-2026-0042 PowerShell Universal","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}