CVE-2026-70337: Microsoft PowerShell Remote Code Execution Vulnerability

Overview

Severity
High (CVSS 8.8)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Category
Remote Code Execution
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2026-Aug
Released
2026-08-11

Description

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

FAQ

How could an attacker exploit this vulnerability? An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.

Affected Products (3)

Developer Tools

  • PowerShell 7.5
  • PowerShell 7.4
  • PowerShell 7.6

Acknowledgments

<a href="https://x.com/hasanfleyah">Hasan Flayyih Abdullah</a>, <a href="https://x.com/0x7m_d">0hmz</a>, f7d8c52bec79e42795cf15888b85cbad, xboy, <a href="https://x.com/theteatoast">Anindya Roy</a>, <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a>, xboy, <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a>

Revision History

  • 2026-08-11: Information published.