{"id":"CVE-2026-129137","aliases":[],"cve":{"records":[{"id":"CVE-2026-129137","source":"DEVOLUTIONS","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-13T16:27:13.602Z","published":"2026-11-13T21:22:47.164Z","modified":"2026-11-13T21:22:47.164Z"}],"publishers":[{"name":"DEVOLUTIONS","role":"CNA","organizationId":"bfee16bd-18e6-446c-9a65-f5b2e3d89c23","modified":"2026-11-13T21:22:47.164Z"}],"references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0042/","tags":[],"source":"DEVOLUTIONS"}],"weaknesses":[{"id":"CWE-276","description":"CWE-276 Incorrect Default Permissions","source":"DEVOLUTIONS"}],"applicability":[],"prioritization":[]},"title":"Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to…","titleSource":"DEVOLUTIONS","descriptionSource":"DEVOLUTIONS","description":"Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and earlier allows a local unprivileged user to execute arbitrary code as SYSTEM via a crafted agent configuration file that points the agent to an attacker-controlled server.","score":null,"severity":"unknown","published":"2026-11-13T21:22:47.164Z","modified":"2026-11-13T21:22:47.164Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Devolutions","name":"PowerShell Universal","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2026.3.5","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"DEVOLUTIONS","url":"https://www.cve.org/CVERecord?id=CVE-2026-129137"}],"remediation":[],"references":["https://devolutions.net/security/advisories/DEVO-2026-0042/"],"sources":[{"name":"CVE","id":"CVE-2026-129137","modified":"2026-11-13T21:22:47.164Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-129137"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-11-13T21:41:06.161Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T22:35:32.718Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T21:45:35.790Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-13T21:45:38.105Z","attemptedAt":"2026-11-13T21:45:38.105Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-13T21:45:38.683Z","attemptedAt":"2026-11-13T21:45:38.683Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T21:45:37.846Z","attemptedAt":"2026-11-13T21:45:37.846Z"}],"evidence":[],"aiSummary":{"text":"Devolutions PowerShell Universal versions 2026.3.4 and earlier have incorrect default permissions in the agent configuration folder, allowing a local unprivileged user to potentially execute code as SYSTEM. The weakness is due to incorrect default permissions. A crafted agent configuration file is required.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T21:46:07.392Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-129137"}]}}