CVE-2026-62801
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
An attacker may access files outside the allowed directory, potentially leading to data disclosure or privilege escalation.
Recommendation
Update PowerShell and enforce strict input path validation.
Other vulnerabilities in Windows PowerShell
See all- CVE-2017-8565High
PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.
- CVE-2026-69807High
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
- CVE-2026-40400High
Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS