Portal 
Forum 
Devolutions Force 
Hub Business 
Hub Personal 
Devolutions Send 
Devolutions Academy 
RDM 
Workspace 
Launcher 
Security & compliance
Upholding the highest standards to protect your data and ensure trust.
DEVO-2025-0015
Devolutions Server is affected by multiple vulnerabilities.
Affected Products
See vulnerabilities for affected products.
Change Log
20/10/2025 - Initial publication
9 Critical - CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:H
Improper authorization in the “Temporary access” workflow of Devolutions Server
Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.
Affected Products
CVE(s)
CVE-2025-11957
Remediation and Workarounds
Upgrade to Devolutions Server 2025.2.14.0 or higher
5.1 Medium - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
An improper input validation in the Security Dashboard
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.
Affected Products
CVE(s)
CVE-2025-11958
Remediation and Workarounds
Upgrade to Devolutions Server 2025.3.2.0 or higher
