Improper Link Resolution in Devolutions Remote Desktop Manager Software

CVE-2026-13372

What is CVE-2026-13372?

The Devolutions Remote Desktop Manager contains a vulnerability that stems from an improper link resolution by display name in its custom PowerShell VPN editor. This issue allows an authenticated attacker, who has write access to a shared workspace, to execute a PowerShell script under another user's context. The vulnerability arises from a display name collision with an existing VPN script link, enabling potential unauthorized operations within the software.

References