CVE-2026-3277
Received Received - Intake
Cleartext OIDC Client Secret Exposure in PowerShell Universal Authentication

Publication date: 2026-02-27

Last updated on: 2026-03-30

Assigner: Devolutions Inc.

Description
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-27
Last Modified
2026-03-30
Generated
2026-06-16
AI Q&A
2026-02-27
EPSS Evaluated
2026-06-14
NVD
CVE-2026-3277
EUVD
EUVD-2026-9030
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ironmansoftware powershell_universal to 2026.1.3 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability in PowerShell Universal before version 2026.1.3 involves the OpenID Connect (OIDC) authentication configuration storing the OIDC client secret in cleartext within the .universal/authentication.ps1 script.

This means that if an attacker has read access to this script file, they can easily obtain the OIDC client credentials.

Impact Analysis

An attacker who gains read access to the .universal/authentication.ps1 script can retrieve the OIDC client secret, which may allow unauthorized access to authentication systems relying on these credentials.

This could lead to compromised user authentication, unauthorized access to protected resources, and potential further exploitation within the affected environment.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-3277. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart