A relative path traversal vulnerability in Microsoft PowerShell Core could allow an unauthenticated attacker to execute arbitrary code, posing a severe risk to system integrity.

This vulnerability involves a relative path traversal flaw where an attacker can manipulate file paths to execute unauthorized code. The attack vector is network-based and does not require prior authentication, although it relies on user interaction.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the host system, potentially leading to a complete compromise of the affected environment. Given the CVSS score of 8.8, this is a high-severity issue that could result in unauthorized data access, system disruption, or lateral movement within the network.

Immediate Action: Update all instances of Microsoft PowerShell to the latest patched versions (7.4.19, 7.5.10, or 7.6.5) immediately.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected file access requests originating from the PowerShell environment.

Compensating Controls: Implement network-level access controls to restrict exposure of management services and ensure that users operate with the principle of least privilege.

Public Exploit Available: false

The potential for remote code execution makes this a critical security concern for any organization utilizing PowerShell Core. Administrators should prioritize patching these specific versions to eliminate the underlying path traversal flaw and prevent unauthorized system access.