CVE-2025-0691

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation...

CVE-2025-0691

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation...

CVE-2025-0691

Devolutions Server versions 2025.1.10.0 and earlier are vulnerable to an improper access control flaw within the permissions component. An authenticated user can bypass the "Edit permission" by circumventing client-side validation. This allows for unauthorized actions despite the intended permiss...