Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Devolutions |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2026-0025/ |
|
History
Sun, 02 Aug 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cleartext Storage of Secret Variables in Devolutions PowerShell Universal Enables Local Information Disclosure |
Sat, 01 Aug 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cleartext Storage of Sensitive Variables in PowerShell Universal |
Sun, 26 Jul 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cleartext Storage of Sensitive Variables in PowerShell Universal |
Fri, 24 Jul 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Devolutions
Devolutions powershell Universal |
|
| Vendors & Products |
Devolutions
Devolutions powershell Universal |
Fri, 24 Jul 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected. | |
| Weaknesses | CWE-312 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: DEVOLUTIONS
Published: 2026-07-24T14:55:56.419Z
Updated: 2026-07-24T17:39:03.467Z
Reserved: 2026-07-23T19:25:10.122Z
Link: CVE-2026-16802
Vulnrichment
No data.
NVD
No data.
Redhat
No data.