CVE-2026-12161

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager version 2026.2.7

Description Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permissions to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host. This is achieved by using stored elevation credentials through a crafted alternate username, requiring user interaction with the Elevate Shell action.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.