Deadlock Vulnerability in Devolutions Server Scheduling Service

CVE-2025-8312

What is CVE-2025-8312?

A deadlock vulnerability within the PAM automatic check-in feature of Devolutions Server allows a password to remain valid beyond its intended check-out period. This occurs due to a deadlock in the scheduling service, potentially exposing sensitive information or enabling unauthorized access. It is crucial for users running Devolutions Server 2025.2.5.0 and earlier to be aware of this issue and apply necessary updates to mitigate risks to their password management processes. For detailed guidance, refer to the advisory available at Devolutions.

References