CVE-2026-126332

Devolutions Server versions 2026.3.13.0 and earlier are affected by an improper access control vulnerability in the autofill vault search. An authenticated user with only view permission on a shared entry can obtain that entry's password in clear text . This occurs by leveraging a linked credenti...