---
id: "CVE-2026-129137"
page: "https://infrastack.ai/live/CVE-2026-129137"
kind: "vulnerability"
aliases: ["CVE-2026-129137"]
title: "PowerShell Universal: weak folder permissions let local users run code as SYSTEM"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "PowerShell Universal", "fixed": ["2026.3.5"], "affected": "<= 2026.3.4", "ecosystem": "vendor"}]
ecosystems: []
tags: ["local-privilege-escalation", "powershell-universal", "self-hosted", "vendor", "windows"]
not_affected_if: ["newer-version", "no-local-untrusted-users", "version-2026.3.5-or-later"]
published_at: "2026-11-13T22:17:24+00:00"
first_seen_at: "2026-11-13T22:33:34+00:00"
updated_at: "2026-11-13T22:37:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-129137", "first_seen_at": "2026-11-13T22:33:34+00:00"}, {"source": "analyst", "url": "https://devolutions.net/security/advisories/DEVO-2026-0042/", "first_seen_at": "2026-11-13T22:37:19+00:00", "cites": ["https://devolutions.net/security/advisories/DEVO-2026-0042/"]}]
exploit_sources: []
---

# PowerShell Universal: weak folder permissions let local users run code as SYSTEM

Link for people: https://infrastack.ai/live/CVE-2026-129137 (this .md is for agents)

Devolutions PowerShell Universal 2026.3.4 and earlier sets insecure default permissions on the agent configuration folder. A local user with no special rights can place a crafted agent configuration file that points the agent at an attacker-controlled server, and the attacker then executes arbitrary code as SYSTEM.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:PowerShell Universal affected <= 2026.3.4 fixed 2026.3.5

## How to check

Check the installed PowerShell Universal version: 2026.3.4 or earlier is affected, 2026.3.5 or later is fixed. Also check the ACL on the agent configuration folder for write access by non-administrators; the advisory does not give the path.

## Fix

Upgrade PowerShell Universal to 2026.3.5 or later (Devolutions DEVO-2026-0042). No workaround listed.

## Timeline

- 2026-11-13T22:33:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-129137
- 2026-11-13T22:37:19+00:00 analyst https://devolutions.net/security/advisories/DEVO-2026-0042/ — Read Devolutions DEVO-2026-0042: fix 2026.3.5, affected 2026.3.4 and earlier, CVSS 4.0 8.5 (AV:L/PR:L). Advisory gives no folder path or workaround; not marked verified for how_to_check. No exploitation or PoC found; no social search done (local, low-profile).

## Documents

- [advisory] DEVO-2026-0042 PowerShell Universal https://devolutions.net/security/advisories/DEVO-2026-0042/

## From the sources

Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_