What is GHSA-33fw-w4q9-fhpq?

GHSA-33fw-w4q9-fhpq is a security advisory published by GitHub Security Advisories with Medium severity. Improper access control in the automation tests and workflows features in Devolutions PowerShell...

Which CVE IDs does GHSA-33fw-w4q9-fhpq cover?

GHSA-33fw-w4q9-fhpq covers the following CVE IDs: CVE-2026-16799. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-33fw-w4q9-fhpq?

GHSA-33fw-w4q9-fhpq has a CVSS v3 base score of 5.0, published by GitHub Security Advisories.

GHSA-33fw-w4q9-fhpqMediumCVSS 5.0

Improper access control in the automation tests and workflows features in Devolutions PowerShell...

Vendor

GitHub Security Advisories

Published

July 24, 2026

Last Modified

July 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-16799 →

📋 Description

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16799
https://devolutions.net/security/advisories/DEVO-2026-0025
https://github.com/advisories/GHSA-33fw-w4q9-fhpq