The vulnerability is an improper neutralization of special elements in PowerShell command input, allowing an authorized attacker to inject arbitrary commands. This command‑injection flaw (CWE‑77) can lead to execution of local code, compromising the confidentiality, integrity, or availability of the affected system. Only users with legitimate PowerShell privileges can exploit the flaw, and exploitation requires the attacker to provide crafted input that bypasses the shell’s sanitization.

Microsoft PowerShell 7.4, 7.5, and 7.6 on Windows platforms.

The CVSS base score of 7.8 indicates high severity. The EPSS score is not available, so a precise estimate of how often this flaw might be exploited currently is unknown. The flaw is not listed in the CISA KEV catalog, suggesting no publicly known exploit. The likely attack path involves an authenticated user running a maliciously crafted PowerShell script or command that contains unescaped input. Due to its local execution nature, the threat is limited to machines that have the vulnerable PowerShell version installed and where users can run scripts.