Privilege Escalation Vulnerability in Devolutions PowerShell Universal

CVE-2026-102632

What is CVE-2026-102632?

A privilege escalation vulnerability exists in the app token management component of Devolutions PowerShell Universal versions 2026.3.4 and earlier. This flaw allows authenticated users with token creation or update privileges to escalate their access to administrator privileges. Additionally, it enables the reinstatement of revoked app tokens in multi-node environments through specially crafted token requests that can define arbitrary roles or revocation states, thereby compromising the security of the entire system.

References