An attacker can exploit a relative path traversal flaw in Microsoft PowerShell Core to run arbitrary code when the vulnerable instance processes network requests. This weakness (CWE-23) enables unauthorized code execution, giving the attacker full control over the target system. The flaw allows the attacker to specify path fragments that escape expected directories, causing PowerShell to load and execute malicious modules sent over the network.

The affected products are Microsoft PowerShell versions 7.4, 7.5, and 7.6 on all supported platforms. No specific sub‑versions or build numbers are listed, but the flaw exists in the core engine used by these releases.

CVSS score of 8.8 indicates high severity, while an EPSS score of less than 1% points to a low probability of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog. The likely attack path involves an unauthorized attacker initiating a network connection to a remote PowerShell instance; through crafted input the attacker can traverse directories and execute code. Defensive measures should therefore focus on patching and restricting remote access until remediation is complete.