CVE-2026-3277 – PowerShell Universal OpenID Connect Cleartext Client Secret Exposure

CVE ID : CVE-2026-3277

Published : Feb. 27, 2026, 4:16 p.m. | 55 minutes ago

Description : The OpenID Connect (OIDC) authentication configuration in PowerShell
Universal before 2026.1.3 stores the OIDC client secret in cleartext in
the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…