What is GHSA-fw4j-fj8v-q67w?

GHSA-fw4j-fj8v-q67w is a security advisory published by GitHub Security Advisories with Medium severity. Insertion of sensitive information into sent data in the AI Agent job API in Devolutions...

Which CVE IDs does GHSA-fw4j-fj8v-q67w cover?

GHSA-fw4j-fj8v-q67w covers the following CVE IDs: CVE-2026-13437. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fw4j-fj8v-q67w?

GHSA-fw4j-fj8v-q67w has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-fw4j-fj8v-q67wMediumCVSS 6.5

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions...

Vendor

GitHub Security Advisories

Published

June 29, 2026

Last Modified

June 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-13437 →

📋 Description

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens serialized in plaintext in job API responses.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13437
https://devolutions.net/security/advisories/DEVO-2026-0022
https://github.com/advisories/GHSA-fw4j-fj8v-q67w