High · published December 9, 2025
⚡ An unauthorized attacker can execute local code with just a crafted command! This command injection vulnerability in Windows PowerShell is absolutely alarming. 🔥 Think of PowerShell as a highly skilled chef in a restaurant kitchen. If someone sneaks in and slips a rogue recipe into the mix, they could whip up something truly disastrous—without the chef ever knowing! With this vulnerability, an attacker could gain local access to the system and execute arbitrary commands, potentially leading to data breaches, system compromise, or even total control over the machine. It's like letting a stranger into the kitchen, and they start tossing in harmful ingredients. That's a recipe for disaster!
Think of PowerShell as a highly skilled chef in a restaurant kitchen. If someone sneaks in and slips a rogue recipe into the mix, they could whip up something truly disastrous—without the chef ever knowing! This command injection flaw arises from improper neutralization of special elements, enabling unauthorized users to execute commands in the PowerShell environment as if they were legitimate users.
With this vulnerability, an attacker could gain local access to the system and execute arbitrary commands, potentially leading to data breaches, system compromise, or even total control over the machine. It's like letting a stranger into the kitchen, and they start tossing in harmful ingredients. That's a recipe for disaster! To protect your systems, ensure you update to the latest PowerShell version as soon as it's available. Additionally, review your security policies to limit access to PowerShell and refine command execution permissions. Regular audits can also help catch any suspicious command usage! This is fixable! Follow these steps and you'll be on your way to securing your systems in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7456 | 10.0.26100.7456 |
| microsoft/windows_11_25h2 | < 10.0.26200.7456 | 10.0.26200.7456 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4529 | 10.0.20348.4529 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7456 | 10.0.26100.7456 |