The vulnerability is an improperly executed security check for a standard in Microsoft PowerShell, enabling an unauthorized attacker to bypass a security feature over a network. This bypass can allow execution of scripts or commands that would normally be blocked, potentially leading to privilege escalation or unauthorized actions within the affected PowerShell environment.

The affected products are Microsoft PowerShell versions 7.4, 7.5, and 7.6. The vulnerability implements only these versions; no other Windows PowerShell versions are listed, and there is no disclosed patch version yet.

The CVSS score of 6.5 indicates a medium severity, and the EPSS score is not available, suggesting limited public exploitation data. The vulnerability is not listed in the CISA KEV catalog, implying no known large‑scale exploits. The exploit requires a network connection to the PowerShell instance, targeting the insecure security check. An attacker could send crafted input to trigger the bypass, achieving elevated privileges or executing untrusted scripts if the system does not enforce strict script policies.