EUVD-2026-73625
GHSA-r57c-9749-hr2p
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-reachable via WinRM with low-privilege auth, user interaction required, full C/I/A impact from successful privilege escalation to SYSTEM.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Path traversal in Windows PowerShell enables a low-privileged, network-authenticated attacker to escalate privileges to higher access levels across a broad range of Windows desktop and server versions. The flaw (CWE-22) allows improper resolution of file paths outside a restricted directory boundary within the PowerShell subsystem, reachable over the network with user interaction required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must hold a valid low-privileged account (local or domain) on the target system, satisfying the PR:L CVSS metric - unauthenticated exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.0 base score reflects a network-reachable, low-privilege, user-interaction-required privilege escalation with full C/I/A impact - a credible high-severity finding. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patches via Windows Update or WSUS to bring all affected systems to the fixed build versions listed per-release in the EUVD data (e.g., Windows Server 2025 to ≥10.0.26100.33438, Windows 11 24H2/25H2 to ≥10.0.26100.9445/10.0.26200.9445, Windows 10 22H2 to ≥10.0.19045.7725). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory Windows systems running PowerShell and cross-reference against Microsoft's advisory to identify affected versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today