PT-2026-145524
CVE-2026-126332
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Devolutions Server versions prior to 2026.3.13.1
Description
Improper access control in the autofill vault search allows an authenticated user who has only view permissions for a shared entry to retrieve the password in clear text. This is achieved by creating a linked credential entry within the user's private vault.
Recommendations
Update Devolutions Server to version 2026.3.13.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾