The vulnerability is an improperly implemented security check in Windows PowerShell that lets an attacker bypass a built‑in security feature when communicating over a network. This bypass permits the attacker to execute scripts or commands that would normally be blocked, threatening the confidentiality and integrity of the affected system. The weakness is identified as Intentional Security Feature Bypass (CWE‑358).

Affected releases include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2, Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, along with Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 (both full and Server Core installations). Products running on x86, x64, arm64, and arm64‑based systems are impacted.

With a CVSS score of 6.5 the vulnerability falls in the medium severity range. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog, suggesting currently low evidence of exploitation in the wild. The likely attack vector is a remote network connection to PowerShell, where a crafted request can trigger the bypass. If exploited, the attacker could push unauthorized scripts onto the target machine.