CVE-2025-54100
HighCVSS 7.8Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
Risk Assessment
An unauthorized attacker can execute arbitrary code locally, potentially leading to privilege escalation or system security breach.
Recommendation
Apply the latest Windows security updates and restrict PowerShell script execution to trusted sources only.
Other vulnerabilities in Windows PowerShell
See all- CVE-2017-8565High
PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.
- CVE-2026-69807High
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
- CVE-2026-62801Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-40400High
Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS