CVE-2026-3277
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 …
Published: 2026-02-27 · CVSS: 5.5 · CVSS 3.1
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7