Access Control Flaw in Devolutions Server Allows Unauthorized Data Access

CVE-2025-6741

What is CVE-2025-6741?

An improper access control vulnerability in the secure message component of Devolutions Server allows authenticated users to access and potentially exfiltrate unauthorized secure message entries. This flaw arises from the inadequate validation of user permissions when handling secure message entry attachments, making it possible for malicious actors with legitimate credentials to exploit this weakness and steal sensitive information. Users of affected versions must apply necessary security updates to mitigate this risk.

References