Improper Access Control in Devolutions Server Affects Security Features

CVE-2025-3768

What is CVE-2025-3768?

The improper access control vulnerability in Devolutions Server enables authenticated users to bypass the Tor network blocking feature when the Devolutions hosted endpoint becomes unreachable. This vulnerability may lead to potential unauthorized access to sensitive information, as users could gain access to restricted features intended to safeguard the system's integrity. Such weaknesses highlight the necessity for robust access control mechanisms to ensure security in all operational contexts.

References