CVE-2025-49734
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
Summary
PowerShell Direct Elevation of Privilege Vulnerability
Original description
The description as published by the source.
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
Affected packages
Bitnami
powershell
[{"type":"SEMVER","events":[{"introduced":"7.4.0"},{"fixed":"7.4.12"},{"introduced":"7.5.0"},{"fixed":"7.5.3"}]}]
References
- advisory msrc.microsoft.com
- web nvd.nist.gov