Improper Access Control in Devolutions PowerShell Universal Affects Automation Features
CVE-2026-16799

Currently unrated

Key Information:

Vendor: Devolutions
Status: Powershell Universal
Vendor: CVE Published:; 24 July 2026

🔔 Create Devolutions Vulnerability Alert

What is CVE-2026-16799?

An improper access control vulnerability has been identified in Devolutions PowerShell Universal, affecting version 2026.2.2 and earlier. This flaw allows authenticated users with only the Reader role to execute automation tests and modify workflow properties due to the absence of necessary server-side authorization checks. This lack of proper authorization can lead to unauthorized actions that could impact the integrity and security of automated workflows.

Affected Version(s)

PowerShell Universal 0 < 2026.2.3

References

https://devolutions.net/security/advisories/DEVO-2026-0025/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 24, 2026
Vulnerability Reserved
Jul 23, 2026

CVE-2026-16799 Data

JSON