CVE-2026-69807
HighCVSS 8.0Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker could exploit this flaw to access files outside the allowed directory, potentially leading to privilege escalation.
Recommendation
Apply the latest security updates and restrict PowerShell usage to trusted scripts.
Other vulnerabilities in Windows PowerShell
See all- CVE-2017-8565High
PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.
- CVE-2026-40400High
Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.