CVE-2026-13437: Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 a

A vulnerability in Devolutions PowerShell Universal 2026.2.0 allows authenticated users with AI Agent read access to obtain sensitive authentication tokens (reusable credentials that grant access to systems) because these tokens are sent in plaintext (unencrypted, readable text) in job API (an interface for running automated tasks) responses. This could allow attackers to gain higher-level access than they should have.