Executive Summary

This vulnerability is an improper access control issue in Devolutions PowerShell Universal versions 2026.1.7 and earlier. It allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints by accessing the API documentation endpoint.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that an unauthenticated attacker can remotely access detailed API documentation, specifically the OpenAPI specification of user-defined REST endpoints. This exposure can potentially reveal sensitive information about the API structure and endpoints, which could be leveraged for further attacks or exploitation.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by attempting to access the OpenAPI specification of user-defined REST endpoints through the API documentation endpoint without authentication.

A possible method to detect this on your network or system is to send an unauthenticated HTTP request to the API documentation endpoint and check if the OpenAPI specification is returned.

• Use a command like: curl http://<target-server>/api-docs or the specific API documentation endpoint URL to see if the OpenAPI specification is accessible without authentication.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate recommended step to mitigate this vulnerability is to upgrade Devolutions PowerShell Universal to version 2026.2.0 or higher.

Useful 0 Not Useful 0