← Database

CVE-2026-3277

MEDIUM CVSS: 6.5 Published: 2026-02-27 Modified: 2026-06-17

Description

The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials

Affected Platforms

Ironmansoftware Powershell Universal

Weakness Type

CWE-312

References