CVE-2025-49734: PowerShell Direct Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited the vulnerability?

The attacker, initially a non-admin user on the host, could hijack the PowerShell Direct session intended for communication between the admin user on host and a guest VM. This unauthorized access enables the attacker to impersonate the admin host user in communications with the guest, potentially manipulating or controlling guest-side operations.