An authenticated user with AI Agent read access to Devolutions PowerShell Universal can retrieve reusable authentication tokens that are serialized in plaintext by the AI Agent job API. The flaw exposes token material that could be used for higher‑privileged access. This is a classic information exposure weakness classified under CWE‑201.

The vulnerability affects Devolutions PowerShell Universal version 2026.2.0. Systems running this library with AI Agent services exposed should be examined for the presence of the affected API endpoints.

The attack surface is limited to internal users or services that authenticate and possess AI Agent read permissions; it does not allow arbitrary remote code execution. The CVSS score of 6.5 indicates a moderate‑to‑high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits so far. Nonetheless, the exposure of authentication tokens presents a high confidentiality risk and should be treated with urgent priority.