Is CVE-2026-16802 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-16802

Description

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.