CyberRota Analysis
AI-GeneratedDevolutions PowerShell Universal versions 2026.2.2 and earlier are vulnerable to code injection through the schedule feature, allowing authenticated users with schedule creation permissions to execute arbitrary PowerShell code by manipulating schedule parameter names. This vulnerability poses a significant risk as it can lead to unauthorized code execution, potentially compromising the integrity and security of the system. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedule creation permission to execute arbitrary PowerShell code via crafted schedule parameter names concatenated into a script invocation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)