This vulnerability, identified as CWE-918, affects Microsoft PowerShell Core version 7.4.0. It enables an unauthorized attacker to perform server-side request forgery (SSRF), which can lead to information disclosure over a network. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity, with network attack vector, low attack complexity, no privileges required, and requiring user interaction. Microsoft has published an official fix for this vulnerability, as detailed in their security update guide.

An attacker exploiting this SSRF vulnerability can cause the PowerShell server to make unauthorized network requests, potentially disclosing sensitive information. The impact is limited to confidentiality as integrity and availability are not affected. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users of PowerShell Core version 7.4.0 should apply the vendor-provided patch as soon as possible. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58612 for detailed remediation instructions.