Improper Access Control in Devolutions Server Affects User Credential Security

CVE-2026-126332

What is CVE-2026-126332?

An improper access control vulnerability in Devolutions Server permits authenticated users with restricted view permissions to access sensitive password information. Specifically, users with only view rights on a shared entry can inadvertently retrieve the password in clear text through a linked credential entry located in their private vault. This situation raises significant security concerns, impacting the confidentiality and integrity of user credentials.

References