Relative Path Traversal Vulnerability in Microsoft PowerShell Core
CVE-2026-70337

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Powershell 7.4
Powershell 7.5
Powershell 7.6
Vendor
CVE Published:
11 August 2026

What is CVE-2026-70337?

A relative path traversal vulnerability exists in Microsoft PowerShell Core. This flaw allows an unauthorized attacker to exploit the software and execute arbitrary code over a network, potentially leading to unauthorized access and control over affected systems. Organizations using PowerShell Core should take immediate action to secure their systems by applying relevant patches and implementing additional security measures.

Affected Version(s)

PowerShell 7.4 7.4.0 < 7.4.19.0

PowerShell 7.5 7.5.0 < 7.5.10.0

PowerShell 7.6 7.6.0 < 7.6.5

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.