CVE-2026-70337: Microsoft PowerShell Remote Code Execution Vulnerability

Overview

Severity
High (CVSS 8.8)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Category
Remote Code Execution
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2026-Aug
Released
2026-08-11
Last Updated
2026-08-28
EPSS Score
0.94% (percentile: 59.3%)

Description

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

FAQ

How could an attacker exploit this vulnerability? An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.

Affected Products (3)

Developer Tools

  • PowerShell 7.5
  • PowerShell 7.4
  • PowerShell 7.6

Security Updates (3)

Acknowledgments

Anonymous, <a href="https://x.com/hasanfleyah">Hasan Flayyih Abdullah</a>, <a href="https://x.com/0x7m_d">0hmz</a>, f7d8c52bec79e42795cf15888b85cbad, xboy, <a href="https://x.com/theteatoast">Anindya Roy</a>, <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a>, <a href="https://www.linkedin.com/in/moathaloufi/">Moath Aloufi</a>, xboy, <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a>

Revision History

  • 2026-08-11: Information published.
  • 2026-08-14: The security updates for Powershell have been updated.
  • 2026-08-17: Acknowledgement Updated
  • 2026-08-25: Acknowledgement Updated
  • 2026-08-28: Acknowledgement Updated