Release notes

Security3 Improvements2 Fixes9

2026.2.14.0

·July 27, 2026

2026.2.12.0

·July 14, 2026

Security3 Improvements1 Fixes5

2026.2.11.0

·July 6, 2026

Improvements3 Fixes10

2026.2.9.0

·June 23, 2026

Security1 Improvements4 Fixes9

2026.2.7.0

·June 16, 2026

Security5 Improvements4 Fixes16

Security

5

Core - Fixed a security issue where ticketing service credentials (ServiceNow and Jira) could be viewed by authenticated users through data source settings
CVE-2026-11890 PAM - Fixed missing permission checks on discovery scan results, ensuring only authorized users can access discovery data
CVE-2026-12105 Core - Fixed a security issue where duplicating a folder could expose attachments and handbook pages to users without access to the original content
CVE-2026-12105 Core - Fixed an issue where social-login entry metadata could be visible to vault members who were explicitly denied access to those entries
Core - Fixed a privilege escalation issue that could allow users creating vaults or PAM providers to assign themselves System Administrator rights

Improvements

4

Core - Website Legacy entries can no longer be edited and must be converted before use. The option to permanently dismiss the conversion notice has also been removed
PAM - Added requested elevation details to reports
PAM - Added visibility into which approvers received temporary access and PAM checkout requests
PAM - Prevented users from approving their own checkout requests through linked accounts when self-approval is disabled

Fixes

16

Core - Fixed a performance regression that caused system permission changes to take longer than expected to save
Core - Fixed a synchronizer error that occurred when nested groups were deleted in Entra ID (Azure AD)
Core - Fixed an issue preventing orders from being created when they contained both a starter pack and additional licenses
Core - Fixed an issue where changing a password on first login after a basic installation could fail
Core - Fixed an issue where exported attachments and documents could become unusable after re-importing with attachments included
Core - Fixed an issue where the "Template list only" mode was not enforced, allowing entries to be created without a template
Core - Fixed an issue where variables were not resolved when unsealing entries or sending related notifications
Core - Fixed false password-change audit logs and notification emails when updating non-credential Website entry settings
Core - Improved loading performance for repository assignments, including the Batch Grant Access window
PAM - Fixed PostgreSQL accounts incorrectly appearing out of sync after successful password resets
PAM - Fixed the "MFA on checkout" default setting not being saved
Web - Fixed a JavaScript error when viewing entry details containing deserialization errors under Reports > Diagnostic > Entries
Web - Fixed an issue where deleting an entry could trigger an error and leave the connections tree in an incorrect state until the page was refreshed
Web - Fixed an issue where unsupported AI Assistant providers appeared blank in the edit dialog and could cause the wrong provider to be saved
Web - Fixed Synchronizer entries becoming unusable in the web interface when the synchronization mode was set to manual or inherited manual
Web - UI fixes

2026.2.5.0

·June 8, 2026

Security3 Improvements5 Fixes10

2026.2.4.0

·June 2, 2026

Features9 Improvements15 Fixes42

New features

9

Core - Added a certificate-based Conditional Access Policy for certificate authentication
Core - Added a dedicated AI Assistant entry in DVLS
Core - Added a new credential mode to save and autofill social logins with the Password Manager extension
Core - Added in-app notifications when a new DVLS server version is available
Core - Added support for Microsoft Entra ID authentication using delegated permissions
Core - Added the ability to configure the number of simultaneous checkouts allowed for an entry
PAM - Added the ability to configure a default elevation group during checkout
PAM - Added the option to require MFA when checking out a PAM account
Web - Added Brandfetch auto-complete support when creating website entries

Improvements

15

Core - Added a search bar in the user selection dialog when creating a new domain user, searchable by sAMAccountName, displayName and OU
Core - Added CVE vulnerability checks on the security dashboard with upgrade recommendations
Core - Added the ability to filter entries by connection type through the REST API
Core - Email notifications now use the user's configured language preference
Core - Improved contractor user management with a redesigned onboarding experience, automatic password generation, and clearer disabled user indicators
Core - Reduced the in-app trial period from 30 days to 14 days
PAM - Added a "Skip TLS validation" option for the Windows provider
PAM - Added support for using the provider account for SSH password heartbeat when target accounts have SSH access disabled
PAM - Enhanced password rotation scheduling with more flexible configuration options
PAM - Improved access requests to include the full hierarchy of linked connections
Web - Added a button to clear all user notifications
Web - Added a Convert button to the legacy website banner for faster entry conversion
Web - Added a notification in the Administration Dashboard when a new DVLS version is available
Web - Added vertical navigation in the Administration and Reports areas to make settings easier to find
Web - Extended user synchronizer support in the web interface

Fixes

42

Core - Fixed a missing translation when requesting access to available vaults
Core - Fixed a NullReferenceException that could occur when a deleted connection notification was processed
Core - Fixed a portable license error ("Invalid license: RDM") on first login
Core - Fixed a regression where Custom permissions behaved as Denied in web and RDM clients
Core - Fixed a regression where vault assignments were not applied during user group import
Core - Fixed a SQL timeout when renaming folders containing a large number of entries
Core - Fixed an Access Denied error when non-admin users tried to add an entry from a template
Core - Fixed an error when opening Duo MFA settings and improved invalid credential validation
Core - Fixed an error when starting a trial with an no email address
Core - Fixed an issue where duplicating a folder did not copy sub-entries
Core - Fixed an issue where entry types disappeared from Type Availability when the last selected vault was content-restricted
Core - Fixed an issue where removing an expired license incorrectly prompted for DVLS Free
Core - Fixed attachments being lost when moving entries to another vault
Core - Fixed DVLS being unable to connect to SQL Server on Linux when TLS encryption was enabled
Core - Fixed Entra App Proxy pre-authentication failing when the DVLS account had MFA enforced
Core - Fixed linked external vault information not being saved when linking an SSH key
Core - Fixed missing translation and username details in temporary access approval emails
Core - Fixed Syslog over TCP messages not being RFC 6587 compliant, preventing ingestion by some collectors
Core - Fixed the "Do not show again" option not working in the Clipboard Privacy warning dialog
Core - Fixed trailing spaces being saved in Tags and in Notification Subscription "Exact expression" parameters
Core - Fixed User Settings Vault and Global settings not working for non-admin users in RDM
Gateway - Fixed an issue where "Ping all Gateways" incorrectly reported failures
Gateway - Fixed an issue where Gateway vault security incorrectly applied to PAM providers
Gateway - Fixed GatewayManager creating a short-lived, undisposed HTTP client for every request, which could lead to socket exhaustion
Gateway - Fixed the Update button remaining disabled after deleting a configured Gateway
PAM - Fixed a regression where inherited OTP no longer worked on PAM accounts
PAM - Fixed an issue where admins appeared as approvers even when disabled in settings
PAM - Fixed an issue where approval through role/group permissions did not work
PAM - Fixed checkout approvers not appearing in the approvers list when no PAM license is assigned
PAM - Fixed having to scroll to access buttons in Reports > PAM Check-out requests
PAM - Fixed incorrect "license required" messages shown to licensed PAM users
PAM - Fixed PAM account details remaining visible while the account was checked out
PAM - Fixed the PAM scheduler hanging on local Windows account scans when the target stopped responding
PAM - Fixed the Windows Local Account provider template scan returning no results
Web - Fixed a toast notification incorrectly showing "Not found" when deleting entries
Web - Fixed a TypeError when opening Advanced Search as a user without a user vault
Web - Fixed RDP/VNC/ARD left mouse clicks triggering a right-click in the web client when running in Firefox
Web - Fixed the SSH web app not prompting for the private key passphrase when one was required
Web - Fixed unnecessary icon cache fetches caused by virtual scrolling
Web - Fixed web RDP sessions not invoking the KDC Proxy, causing Kerberos authentication to fall back to NTLM
Web - Multiple UI fixes
Web - Multiple UI fixes

2026.1.24.0

·July 27, 2026

Security3

2026.1.23.0

·July 14, 2026

Security4 Fixes2

2026.1.22.0

·June 16, 2026

Security3 Fixes4

2026.1.21.0

·June 3, 2026

Security3 Fixes4

2026.1.20.0

·June 1, 2026

Security3 Fixes5

2026.1.19.0

·May 21, 2026

Security15 Improvements3 Fixes5

Security

15

CVE-2026-5171 Core - Fixed an issue where users without Activity Logs permission could still retrieve entry logs through the API
CVE-2026-7325 PAM - Fixed an LDAP coercion issue that could force DVLS to authenticate against a malicious LDAP server
CVE-2026-8477 Core - Fixed a security issue where sealed entries could be accessed through the partial sensitive-data endpoint without triggering unseal notifications
CVE-2026-9047 Core - Fixed an issue where adding an additional MFA factor could remove an existing MFA key
CVE-2026-9223 Core - Fixed a missing permission check that could allow users to create a new vault when importing an .rdx file referencing a non-existent vault
CVE-2026-9224 Core - Fixed an issue where Active Directory accounts could modify their own profile data through the API despite UI restrictions
CVE-2026-9245 Core - Fixed an open redirect vulnerability during external OAuth sign-in failures or cancellations
CVE-2026-9246 Core - Fixed an issue where handbook content and attachment metadata from sealed entries could be accessed without following the unseal workflow
CVE-2026-9247 Core - Fixed an issue where sealed credentials could be unsealed in another DVLS instance without notifying administrators, and improved handling of linked sealed credentials after import
CVE-2026-9248 Core - Fixed an issue where duplicating a connection could copy handbooks and attachments from entries the user could not access
CVE-2026-9249 Core - Fixed a password change bypass that allowed users to change passwords without providing the previous password
CVE-2026-9251 Core - Fixed an issue where non-admin users could bypass the Pending Approval flow by changing an entry's status
Core - Added audit logging for Send Copy actions so administrators can track who shared entries and with whom
Core - Hardened the authorization cache key to prevent any future cache-poisoning regression (follow-up to CVE-2026-1768)
Core - Improved authentication security to prevent external-provider sessions from bypassing password authentication under a different login method

Improvements

3

Core - Improved Active Directory user creation performance
PAM - Added an option to skip TLS validation for the Windows Provider
Web - Added Command key support for multi-selection in the web interface, allowing Mac users to extend selections with Cmd-click

Fixes

5

Core - Fixed a NullReferenceException in the notification processing service that could leave notifications stuck in an unprocessed state
Core - Fixed an issue where Linked (External) credentials were not saved correctly on SSH entries linked to an SSH Key
Core - Fixed attachments being lost when moving an entry to another vault
Core - Fixed folder duplication so sub-entries are duplicated along with the parent folder
Web - Fixed a TypeError when opening the Advanced Search dialog as a user without a User Vault

2026.1.16.0

·May 5, 2026

Security1 Fixes15

2026.1.15.0

·April 28, 2026

Security1 Improvements2 Fixes7

2026.1.14.0

·July 27, 2026

Improvements3 Fixes15

2026.1.12.0

·April 1, 2026

Security6 Improvements1 Fixes16

Security

6

CVE-2026-4828 Core - Fixed a security issue where MFA check could be bypassed when Emergency Code authentication was disabled
CVE-2026-4829 Core - Fixed an issue where OAuth session reuse could allow user impersonation, including administrators
CVE-2026-4924 Core - Fixed a security issue where MFA could be bypassed using an alternate authentication cookie
CVE-2026-4925 Core - Fixed an issue allowing users to remove their own MFA despite enforced restrictions
CVE-2026-4927 Core - Fixed an issue where users with management permissions could access other users' MFA secrets
CVE-2026-4989 Core - Fixed an issue where the gateway health check could be exploited for server-side request forgery (SSRF)

Improvements

1

Core - Added dashboard layout reset capability allowing administrators to reset a user's corrupted or misconfigured dashboard layout back to defaults

Fixes

16

Core - Fixed a regression where Microsoft User synchronization failed with an error reading 'UserCleanupDelta'
Core - Fixed an issue where approving temporary access requests did not work when only groups were set as approvers
Core - Fixed an issue where the contractor welcome email redirect did not work if the user was already logged in
Core - Fixed KeePass XML import incorrectly creating Legacy Website entries instead of the correct entry type
Core - Fixed Public API path query parameter filtering to work correctly with encoded URLs and nested paths
Core - Fixed the scheduler service crashing when custom log retention policy configuration contained invalid data
Gateway - Fixed a server-side request forgery vulnerability in the gateway health check route
Gateway - Fixed an issue where new vaults could not be selected when changing the member filter in a gateway farm
Gateway - Fixed session recording not working when the session does not connect through a gateway
Gateway - Fixed the gateway going offline when a connection to a session fails due to a Virtual Gateway rule or other reason
Web - Fixed a regression where the "All vault" button in the search stopped working
Web - Fixed an issue where Domain/AD users could not be added by browsing and selecting them
Web - Fixed normal users receiving an "Unable to save" error in the customize dashboard layout when a default dashboard exists
Web - Fixed the credit card edit component missing a reveal sensitive data button
Web - Fixed the entry security analyzer where the "Pwned" password filter was not working
Web - Fixed the TOTP window display being broken

2026.1.11.0

·March 19, 2026

Improvements4 Fixes31

Improvements

4

Core - Added "Show Release News" preference to control release notification visibility
Core - Free License users now appear disabled with a clear visual indicator to explain login restriction
Core - Renamed "System Dashboard" to "Administration Dashboard" for clearer terminology
Gateway - Added update notification to System Dashboard

Fixes

31

Core - Fixed "Allow API Key" setting not persisting after save
Core - Fixed "Apply Least Permissions" failing when permissions were preconfigured
Core - Fixed "Unable to save" error when users customize dashboards with a default dashboard set
Core - Fixed clipboard restrictions not applying in RDP web sessions
Core - Fixed contractor users unable to launch RDP sessions via permalink
Core - Fixed error when running Last Usage Logs report for regular users
Core - Fixed inability to update password generator templates
Core - Fixed inability to view inherited OTP codes from root
Core - Fixed intermittent dashboard widget reordering not applying
Core - Fixed missing activity logs for User Group restore and delete actions
Core - Fixed new users not being enabled by default when created
Core - Fixed performance issues with Conditional Access Policies enabled
Core - Fixed session termination redirecting incorrectly in Active Sessions view
Core - Fixed user edits unintentionally removing assigned licenses
Core - Fixed vault permissions appearing disabled for non-admin users
Core - Resolved SQL collation issues during database and web backups
Gateway - Fixed advanced domain settings not saving
Gateway - Fixed drain mode and scan option issues in Gateway farms
Gateway - Fixed inability to terminate sessions using credential injection
Gateway - Fixed session launch failures with inherited Gateway Rule Sets
PAM - Fixed duplicated parent folders during account import
PAM - Fixed incorrect error title on recurrent SSH key scan failure
PAM - Fixed missing out-of-sync icon for SSH key accounts
PAM - Fixed module admins unable to see external vaults during import
PAM - Fixed PAM logs and rotation reports stuck loading on refresh
PAM - Fixed SSH checkout approval error with "Yes, unless it's JIT" option
PAM - Fixed unauthorized users appearing in checkout approver list
PAM - Restored custom fields visibility in connection overview
Web - Fixed "Access Denied" error for non-admin session launches with credential injection
Web - Fixed PAM checkout redirect causing 404 error
Web - Fixed Remote PowerShell entries not launching in web client

2026.1.7.0

·March 10, 2026

Improvements6 Fixes19

Improvements

6

Core - Added an option to hide the domain login method when domain SSO is enabled
Core - Dynamic IP Lists are now generated by the server so they work correctly in the web interface and all clients
Core - Expired entry lists and scheduled reports now display the full folder path for better context
Core - Fixed path filtering behavior in the Public API, including support for empty paths returning root entries
Gateway - Gateway-managed sessions from user vaults now correctly display the user's identity
Gateway - In RDM, the Gateway section is only available for vaults with Gateway access

Fixes

19

Core - Fixed a crash when editing unsupported entry types
Core - Fixed a failure when moving entries between vaults with folders sharing the same name in RDM
Core - Fixed activity logs showing identical active time and duration values when switching tabs
Core - Fixed an incorrect message indicating DVLS would revert to the free version after deleting a license
Core - Fixed errors triggered by the "Buy now" button in the licenses section
Core - Fixed missing activity log events when deleting or restoring user groups
PAM - Fixed an empty approver list in the checkout approval dialog for certain SSH account configurations
PAM - Fixed an issue where the default Gateway was not saved when enabling Gateway usage on a PAM provider
PAM - Fixed domain PAM provider connection tests incorrectly falling back to the parent domain
PAM - Fixed missing password reset after failed JIT elevation for non-provisioning accounts
PAM - Fixed OTP prompt appearing for brokering-only PAM accounts
PAM - Fixed vault owners missing from checkout request approver lists
PAM - Fixed visual issues in the propagation template interface
Web - Fixed a blank tree view that appeared when editing entries near the bottom of the scroll position
Web - Fixed a Content Security Policy issue preventing RDP connections in the web client
Web - Fixed an error when saving user vault entries for accounts without a user vault
Web - Fixed live session recordings showing an empty dialog in the web client
Web - Fixed SSH session recordings not opening in the web interface
Web - Fixed the "Reveal password" button failing when creating a Password List entry

2026.1.6.0

·March 3, 2026

Security2 Features16 Improvements37 Fixes27

Security

2

CVE-2026-3204 Core - Fixed an issue where the error message page displayed a tamperable error message
CVE-2026-4434 Fix Improper certificate validation in WinRM connections

New features

16

Core - Added custom vault dashboard widgets with drag-and-drop reordering
Core - Added Just-in-Time (JiT) access for SSH (sudo) sessions
Core - Added new Contractors account type with expiration date support
Core - Added support for SSH key certificates in the web
Core - Added vault priority sorting
Core - Admins can create preset dashboards for users
Core - Licenses can now be purchased directly within DVLS
Core - Multiple improvement and fixes with the synchronizer where they was mismatch with RDM
Core - Users can now request a trial directly from the application
Core - Users can now request sudo access when requesting checkout
Gateway - Added RDP credential injection for more secure session launches
Gateway - Added traffic event logs to privileged session monitoring
PAM - Added MongoDB provider support
PAM - Added PowerShell session recording
PAM - Added the ability to automatically terminate active sessions when a PAM account is checked in
PAM - Added UI to assign and manage risk levels for roles

Improvements

37

Core - Added "Prompt on connection" support for linked VPN/SSH/Gateway sessions, matching the behavior already available for linked credentials
Core - Added launch links on connections for quick session sharing
Core - Added missing fields in the "Advanced" tab for SFTP connections
Core - Added OTP support for linked external vaults
Core - Added support for editing Delinea Secret Server entries directly within DVLS
Core - Admins can set the default behavior for automatically checking in PAM accounts when closing entries
Core - Corrected inaccurate syslog messages that reported successful logins incorrectly
Core - Deprecated read-only and restricted permission types
Core - Entra ID now enforces secret expiration with banner and email warnings
Core - Entry security settings now use inherited values by default
Core - Error reports now include connection type details
Core - Improve Entry Security Analyzer report to include all relevant fields, matching the information already available in RDM
Core - Improved license management — disabling a user now automatically removes their assigned licenses
Core - Improved performance for access requests in RDM
Core - Linked vaults can now point to entries in the same folder
Core - Public API now supports CRUD operations for folders and vaults
Core - Renamed Log Retention Policies to Database Retention Policies and added retention options for connection history, remote sessions, and traffic events
Core - Simplified license assignment in data sources
Core - Synchronizers now support scheduling by hour
Core - Tags can now be used with inheritance rules
Core - The public API now supports full CRUD operations for vaults, allowing administrators to create, read, update, and delete vaults programmatically
Core - Users can now configure multiple MFA methods at once
Gateway - Renamed "Virtual Gateway" to "Gateway ruleset"
Gateway - Sessions can now be recorded on a different gateway than the launch gateway
Gateway - The Gateway Diagnostic window now displays whether Devolutions Agent is installed and running
Gateway - The gateway list now automatically refreshes after an update request completes
PAM - Added "Create folder" option when importing PAM accounts
PAM - Added "Skip TLS validation" option in PowerShell provider settings
PAM - Added "Workspace" as a supported application option in the PAM usage policies admin section
PAM - Improved error message when no provider is specified on a PAM account
PAM - Renamed "Scan" to "Account Discovery"
PAM - Users without a PAM license can now perform basic PAM operations, such as checking out PAM credentials, without requiring a full PAM license Assignment
Web - Added a warning in the web interface when an OTP account name contains a colon (":"), consistent with existing behavior in RDM
Web - Administrators can now set permissions on entry types that are not technically supported on the web
Web - Users can now customize the "Add connection" favorites section
Web Client - Multiple UI improvements
Web Client - Updated dark theme

Fixes

27

Core - Fixed a regression where it was no longer possible to set a user as an administrator
Core - Fixed a scheduler timeout error that could cause scheduled tasks to fail intermittently
Core - Fixed an error occurring when too many vaults were present
Core - Fixed an error that occurred when editing account login information on a deprecated entry type
Core - Fixed an issue where exported logs from the DVLS Console were being cropped and truncated
Core - Fixed an issue where forbidden passwords could still be saved in a password list entry
Core - Fixed an issue where new Active Directory user accounts were not appearing in DVLS, preventing the auto-create on first login feature from Working correctly
Core - Fixed an issue where OAuth token rejections were incorrectly returning HTTP 200 with an empty response instead of a proper error code
Core - Fixed duplicate vault cards appearing on the dashboard
Core - Fixed notification emails being sent in English for users configured in French
Core - Fixed repeated migration attempts after SQL migration and server restart
Gateway - Fixed a issue where clicking "Close" from the session kebab menu did not always close the session on the first attempt
Gateway - Fixed a missing configuration option in the Web UI for allowing additional hosts through Devolutions Gateway
Gateway - Fixed an inconsistency in how Gateway tunnels were configured and displayed between RDM and the Web UI
Gateway - Fixed an issue where enabling vault-level security on a gateway prevented it from being used in gateway farms and PAM providers
Gateway - Fixed an issue where virtual gateways were not automatically deleted when their associated physical gateway was removed, leaving orphaned entries that no longer functioned
PAM - Fixed "Nobody" account appearing when "Ignore system users" was enabled
PAM - Fixed a security issue where non-administrator users could view other users' PAM actions in the Privileged Access logs
PAM - Fixed account discovery failure caused by circular security group membership
PAM - Fixed an error that occurred when attempting to add a folder to a newly created PAM vault during the import process
PAM - Fixed an issue where Domain Quick Scan was no longer working
PAM - Fixed an issue where groups located in the Builtin organizational unit were not visible when selecting groups for JIT (Just-In-Time) elevation
PAM - Fixed Local Windows scan failure when credentials were linked
PAM - Fixed SSH scan failure when sudo was configured with NOPASSWORD
Web - Fixed inconsistent rendering of secure notes set as Markdown across different platforms
Web - Fixed the Notification Subscriptions filter not working correctly
Web - Multiple UI fixes

2025.3.23.0

·June 1, 2026

Security2 Fixes2

2025.3.22.0

·May 21, 2026

Security13

2025.3.20.0

·May 5, 2026

2025.3.19.0

·April 29, 2026

Security2 Improvements1 Fixes7

2025.3.18.0

·April 1, 2026

Security5 Fixes7

2025.3.16.0

·March 3, 2026

2025.3.15.0

·February 9, 2026

Security3 Fixes11

2025.3.14.0

·January 15, 2026

Security2 Features1 Improvements2 Fixes6

2025.3.12.0

·December 18, 2025

Security1 Improvements1 Fixes6

2025.3.11.0

·December 4, 2025

Features1 Improvements1 Fixes2

2025.3.10.0

·November 27, 2025

Security4 Improvements5 Fixes7

2025.3.8.0

·November 18, 2025

Fixes14

2025.3.7.0

·November 13, 2025

Improvements2 Fixes9

2025.3.6.0

·November 6, 2025

Security2 Improvements1 Fixes6

2025.3.5.0

·October 28, 2025

Breaking1 Improvements3 Fixes7

2025.3.4.0

·October 22, 2025

Features1 Improvements1 Fixes13

2025.3.3.0

·October 15, 2025

Security1 Improvements1 Fixes8

2025.3.2.0

·October 7, 2025

Security1 Features14 Improvements14 Fixes10

Security

1

CVE-2025-11958 Core - Fixed a security vulnerability that could cause the Security Dashboard to become unavailable

New features

14

Core - Added a "Linked (External Vault)" option for entries, allowing sessions to reference credentials stored in an external vault
Core - Added an onboarding experience for new installations to simplify initial setup
Core - Added an option to enable biometric lock for the Workspace app
Core - Added support for a custom, editable dictionary for passphrase generation
Core - Added the ability for users to create an API key for their account
Core - Added webhook support for specific trigger events
Core - Require re-authentication before allowing users to change MFA
Core - Users can now configure their own MFA
Gateway - Added a new setting to enable RDP reconnection
Gateway - Added network access rules for virtual gateways, with scoping by IP address, IP range, subnet, and DNS name
Gateway - Added virtual gateways, enabling different permissions on the same physical gateway
PAM - Added "Account Life Policies," consolidating PAM options and enabling inheritance at all levels (entry, folder, root)
PAM - Added conditional policies based on JIT elevation status
Web - Added support to disconnect WBEX sessions on close and when idle

Improvements

14

Core - Changed default of password policy and password validation to be handled as "Inherited" - Make sure your inheritance structure is appropriate
Core - Added password expiration to password policies
Core - Added support for attachments when sending via Devo Send in DVLS
Core - Editing an entry now triggers the checkout option
Core - Improved image management with the ability to merge duplicate images
Core - Improved LDAP domain controller fallback for faster failover
Core - Improved the Entry Properties menu to align with RDM, making options easier to find
Core - Removed the ability to grant permissions on entries in vaults the user cannot access
Core - Renamed "Cleanup Log" to "Log Retention Policies"
Core - Renamed "Password Templates" to "Password Policies"
Core - Temporary access on a folder now extends to entries created in that folder after the request
PAM - Added support for editing accounts directly in RDM
PAM - Added tier detection during account discovery for domain and Entra ID accounts
PAM - Local Account scan results now exclude provider service accounts

Fixes

10

Core - Fixed an issue where renaming a folder with a backslash () would break the folder
Core - Fixed an issue where the password generator would not open when editing an entry
Core - Reduced the number of emails sent when Syslog is down
PAM - Fixed an error that occurred when adding JIT elevation to a PAM checkout
PAM - Fixed an error when importing computers from an AD scan
PAM - Fixed an issue where editing Account Life Policies could result in an infinite loading state
Web - Fixed an issue where SSH sessions returned "The authentication sequence has failed" when launched in the web client with a linked-to-vault private key
Web - Fixed an issue where web sessions could not be opened with a PAM credential
Web - Restored the top menu button when opening ARD web sessions
Web - Various user interface fixes and improvements

2025.2.22.0

·January 14, 2026

Improvements1

2025.2.21.0

·November 27, 2025

Security2 Fixes1

2025.2.19.0

·November 19, 2025

Fixes1

2025.2.17.0

·November 7, 2025

2025.2.15.0

·October 16, 2025

Security1 Fixes3

2025.2.14.0

·October 1, 2025

Security2 Fixes4

2025.2.12.0

·September 12, 2025

Security1 Fixes6

2025.2.10.0

·August 20, 2025

2025.2.9.0

·August 14, 2025

2025.2.8.0

·August 7, 2025

Security1 Improvements3 Fixes6

2025.2.7.0

·July 29, 2025

2025.2.5.0

·July 17, 2025

Security1 Improvements3 Fixes8

2025.2.4.0

·June 23, 2025

Security1 Improvements1 Fixes6

2025.2.3.0

·June 16, 2025

Improvements3 Fixes7

2025.2.2.0

·June 4, 2025

Security2 Breaking1 Features8 Improvements17 Fixes4

Security

2

CVE-2025-0691 Core - Fixed an issue where "Edit permissions" could be bypassed. The permission is now validated server side
CVE-2025-3768 Core - Fixed an issue where Tor exit node was updated even on error

Breaking

1

Core - Our EULA and TOS are now combined into a single master agreement and include our new solution packages

New features

8

Core - Added a "Pending Approval" workflow for entry creation
Core - Added a Privileged Session Monitoring tool and a new "Privileged Sessions Monitoring" permission to grant users access to this feature
Core - Added Hyper-V dashboard in web interface
Core - Added new credential mode "use linked host credentials"
Core - Added new permissions for editing VPN/Tunel/Gateway and editing Session Recording configuration
Core - Release notes and What's new are now available in the web interface
PAM - New provider AWS IAM
PAM - New provider PostgreSQL

Improvements

17

Core - Added recording resolution configuration
Core - Added sealed entry feature to linked credentials
Core - Added support for including entries when duplicating a folder
Core - Added user group support to message & report an issue recipients
Core - Improved notification UI
Core - Improved SSH key entry and provide tool to generate ssh key easily
Core - Improved the launch session button
Core - Removed caching for Active Directory and Entra ID
Core - Sealed entries can now be deleted
Core - Users are now flagged as deleted and permenently removed after a configurable period of time
Gateway - Add possibility to save certificate through RDM
PAM - Allow to run propagation script in a different user context
PAM - Checkout can now be configured optionnal
PAM - Improved how AnyIdentity provider can be tested
PAM - Removed JIT provisionning template account type. Standard PAM account are now used with a configuration
PAM - Restrict SSH key to 1
REST Api - Added support for custom fields

Fixes

4

Core - Fixed an issue where a user vault could not be accessed in RDM even when allowed for the user
Core - Fixed an issue where connecting to DVLS could be long
Core - Improved performance when handling a large number of vault entries, making navigation easier
Core - Several UI update

2025.1.13.0

·August 14, 2025

Security1 Fixes1

2025.1.12.0

·July 17, 2025

2025.1.11.0

·June 10, 2025

Security1 Fixes1

2025.1.10.0

·May 28, 2025

Security3 Improvements1 Fixes4

2025.1.9.0

·May 14, 2025

2025.1.7.0

·May 1, 2025

Security1 Fixes3

2025.1.6.0

·April 28, 2025

Features1 Improvements1 Fixes6

2025.1.5.0

·April 2, 2025

Improvements3 Fixes4

2025.1.4.0

·March 19, 2025

Fixes4

2025.1.3.0

·March 12, 2025

Security1 Breaking1 Features6 Improvements23 Fixes20

Security

1

Core - Fixed a security issue in in-app Secure Messages where network requests were not properly verifying authorization

Breaking

1

Changed license validation URL from https://api.devolutions.com to https://quoting.devolutions.com. Make sure your network allows access to this URL

New features

6

Core - Added support for portable license feature
Core - Added support for ServiceNow as a ticketing service
Core - Added support of 'Custom + Inherited' as permission configuration
Gateway - Added a way to clean up recordings on Devolutions Gateway
Gateway - Added centralized update management
PAM - Added a new JIT provisioning account type that allows creating a user in your AD domain for the duration of the checkout time

Improvements

23

Core - Added additional duration options for Devolutions Send message
Core - Added pwned information to the report
Core - Added recording server settings to DVLS
Core - Added search functionality in the system vault
Core - Added support for push notification to RDM devices (Android)
Core - Added support for temporary access on folders
Core - Business users can now open sessions
Core - Improved the "Launch Session" button
Core - My privileged account and My personal credentials are now saved server-side
Core - Notifications are now sent upon entry expiration
Core - The Entry security analyzer report has been improved to include password complexity compliance
Core - The Utilities menu is no longer hidden for business users
Core - User vaults can now be disabled by user
Gateway - Active session recording can now be read (session shadowing)
Gateway - Added support of dynamic connections (Quick Connect, host entries)
Gateway - Health check interval is now set to 5 minutes by default
Gateway - Storage information is now available for managing recordings
PAM - Added a filter to the Active Directory scan to exclude disabled accounts
PAM - Import all Windows local administrators instead of only the default administrator
PAM - Permissions can now be applied to folders
REST Api - Passwords in sessions can now be retrieved
Web - Documentation and attachments can't be modified if entry is checked out
Web - Sessions are now launched in the same browser tab

Fixes

20

Core - Added logging for sealing/unsealing in entry history
Core - Disabled users are now shown as disabled in secure messages
Core - Fixed a paging issue on the Gateways page
Core - Fixed a performance issue with the Data Source Log report
Core - Fixed an error when connecting with SSO in RDM
Core - Fixed an issue in the Activity Logs report where the user filter and user column did not match
Core - Fixed an issue where the "User already exists" error was no longer displayed when importing Entra ID users
Core - Fixed an issue where the JIRA ticketing service was no longer working properly
Core - Fixed an issue where users could not be added to an AD Console entry through the web
Core - Fixed an issue where users could see the User Vault in the Entry Security Analyzer
Core - Fixed an issue where Website entry templates were not visible to business user profiles
Core - Fixed the default application access value when importing multiple user groups
PAM - Fixed an issue where containers could not be selected during an AD scan
PAM - Fixed an issue where PAM account notification subscriptions were no longer working
PAM - Fixed an issue where some accounts were displayed as out of sync after a scheduled password reset
PAM - Fixed an issue where the PAM Password Rotation Report would crash when using a date filter
PAM - Fixed the test connection on PAM providers when using a linked account
PAM - Just-In-Time (JIT) groups requested at checkout are now logged
Web - Added a color code to the security score
Web - Several UI fixes

2024.3.17.0

·May 14, 2025

2024.3.15.0

·April 7, 2025

Fixes1

2024.3.14.0

·March 26, 2025

Security1 Breaking1 Fixes2

2024.3.13.0

·March 4, 2025

2024.3.12.0

·February 20, 2025

Fixes11

2024.3.11.0

·January 16, 2025

Security2 Fixes6

2024.3.10.0

·December 18, 2024

Security2 Improvements4 Fixes5

2024.3.9.0

·November 27, 2024

Security1 Fixes5

2024.3.8.0

·November 13, 2024

Improvements3 Fixes4

2024.3.7.0

·November 4, 2024

Security2 Fixes7

2024.3.6.0

·October 16, 2024

2024.3.4.0

·October 7, 2024

Improvements7 Fixes8

2024.3.3.0

·September 27, 2024

Improvements5 Fixes7

2024.3.2.0

·September 23, 2024

Breaking1 Features6 Improvements16 Fixes10

Breaking

1

Core - The legacy recording server is no longer supported

New features

6

Core - Added a feature to restrict license auto assignation to specific user groups
Core - Allow users to specify permissions requested in temporary access request
Core - Web sessions can now be recorded in the browser
PAM - Added automatic check-in for PAM accounts
PAM - Migrated the PAM permission model to align with the shared vault permissions
PAM - The Active Directory (AD) provider can now manage local accounts on domain machines

Improvements

16

Core - Added an action available on an entry to easily share that entry
Core - Added duplicate for documents stored in database
Core - Added expiration time configuration when sending via Devolutions Send
Core - Added new 'high-priority' feature in messaging
Core - Devo-Send can now be used with Devolutions Server Free edition
Core - Export entry tags in 'Entry security analyzer' report
Core - Groups can be synchronized with their identity provider
Core - Improved offboarding of users by allowing conversion of user vault to a shared vault and unassigning licenses when deleting a user
Core - It is now possible to regenerate an application's secret
Core - Kestrel installation runs scheduler tasks
Core - The Entry Security Analyzer report no longer loads all vaults by default, improving initial load time
Core - User groups not found during provider group synchronization now appear as a warning log instead of an error
Core - Users and groups can be configured to be synchronized on a regular basis
PAM - Improved AnyIdentity provider to be able to use Devolutions Gateway
PAM - Just-In-Time (JIT) requested groups now appear in the logs when a request is made during checkout
PAM - Support for additional entry types added to PAM usage policy

Fixes

10

Core - Fixed a performance issue with Active Directory (AD) console
Core - Fixed an issue where a document stored in the database could not be duplicated
Core - Fixed an issue where a user with a password ending in a space was not functional
Core - Fixed an issue where quick connect didn't create logs
Core - Fixed an issue with viewing template groups correctly
Gateway - Vault's custom variables are now resolved for entries configured with a Devolutions Gateway
PAM - Allow application identities to utilize PAM through PowerShell module
PAM - Fixed an issue where a user could approve their own check-out even if they didn't have the rights
PAM - Fixed an issue where the "Run As" password was erased when editing the provider
Web - Several UI fixes

2024.2.13.0

·October 22, 2024

Security2 Improvements2 Fixes3

2024.2.12.0

·September 26, 2024

2024.2.10.0

·August 20, 2024

Fixes6

2024.2.9.0

·July 25, 2024

Improvements11

2024.2.8.0

·July 15, 2024

Improvements1 Fixes6

2024.2.6.0

·June 27, 2024

Improvements1 Fixes3

2024.2.5.0

·June 25, 2024

Features1 Fixes8

2024.2.3.0

·June 17, 2024

Security1 Breaking1 Features7 Improvements17 Fixes7

Security

1

CVE-2024-4846 Core - Fixed an issue where a user could be authenticated without being asked for the 2FA via another browser tab

Breaking

1

Core - Devolutions Gateway licenses are now by user. A free license valid up to 5 users is now included

New features

7

Core - 5 new security reports: Administrators, System permissions, Devolutions Gateway permissions, Connection permissions and Vault permissions
Core - Added a Devolutions Gateway free license valid for 5 users
Core - Added sealed entry feature
Core - Added vault content type feature
Core - Licenses can now be refreshed to reflect changes
Core - PAM license is now assigned to users
Core - Support RDM connection to DVLS with Azure Proxy

Improvements

17

Core - Actions suggested in security dashboard can now be ignored
Core - Added a way to specify icons for light background or dark background
Core - Added an action "Select in tree" to focus on an entry when the tree is filtered
Core - Added an option to search in all vaults if nothing is found in the current tree
Core - Added recording tab on entries to be able to list all recordings
Core - Added rule based on user tags in conditional access
Core - Added secure message subject in the email sent to user
Core - Added support of Door Code entry
Core - Allow maximum file size to reach 100 Mb
Core - Improved security reports
Core - Improved significantly ARD performance
PAM - Added a display name on a Just In Time (JIT) elevation group
PAM - Improved Just In Time (JIT) elevation to allow the user to set only a subset of groups available on an account during the checkout
PAM - Password rotation is now possible in infrastructure vault
PAM - Support linked credentials on AnyIdentity provider
Rest API - New endpoints to list, create and delete credential entries
Web - Allow to change the side panel width

Fixes

7

Core - Fixed an issue where logs from System Vault were not added in reports
Core - Fixed issue where vaults could not be selected as landing page
Core - Fixed performance issue with LDAP GetGroupByUser
Core - Fixed performance issue with PAM
Core - Removed useless logs to avoid too much logs
Core - Wait a few seconds to get connection with Database when the server starts in case SQL Server is starting as well
Web - Several UI fixes

2024.1.15.0

·June 25, 2024

Security1 Fixes2

2024.1.14.0

·May 16, 2024

Security1 Improvements2 Fixes5

2024.1.13.0

·May 2, 2024

Fixes6

2024.1.12.0

·April 23, 2024

Security1 Fixes6

2024.1.11.0

·April 9, 2024

2024.1.10.0

·April 3, 2024

Security2 Improvements1 Fixes6

2024.1.9.0

·March 28, 2024

Improvements3 Fixes5

2024.1.8.0

·March 26, 2024

2024.1.6.0

·March 18, 2024

Improvements4 Fixes9

2024.1.4.0

·March 5, 2024

Security3 Breaking2 Features11 Improvements10 Fixes6

Security

3

Core - Fixed an issue where notifications could be accessed without permission
DEVO-2024-0002 PAM - Fixed an issue where PAM Azure account is not removed from groups after JIT elevation
Core - Authentication with Azure/Okta can be configured to validate the token on a regular basis. Client changes required

Breaking

2

Core - Upgraded application from .NET 6 to .NET 8
PAM - Migrate PAM account to be able to support documentations and attachments

New features

11

Core - Active Directory web console is now supported
Core - Added PingOne identity provider as authentication
Core - Added support for sending passwords through in-app messaging or Devolutions Send
Core - Administrators can now configured which notifications they want to receive by email
Core - Domain authentication can now use Devolutions Gateway
Core - DVLS can now be used without license (Free version up to 10 users)
Core - Improved our LDAP stack for Active Directory authentication
PAM - Account used to access Devolutions Server Database are now saved in an internal vault
PAM - Provider's password can now be managed and rotated
Rest API - 3 endpoints are now available to get secret/credential value. API documentation is also available from the UI
Scheduler - Support high availability

Improvements

10

Core - Added a way to know if a user has a user vault or not and warn the user when it is deleted
Core - Added vaults and user groups columns in users report
Core - Added vaults and user groups in user reports
Core - Password list can now shows more password in the page
Core - Prevent users to remove all MFA supported if MFA is required to login
Gateway - Support multiple domains to reach the right KDC server
PAM - Documentations and attachments are now possible on PAM account
PAM - Support favorite vault with PAM vaults
Web - Improved the web interface and show all vaults in the side menu
Web - Support for hardware-accelerated cursors and Kerberos with RDP web client

Fixes

6

Core - Fixed an issue where log cleanup could failed with SQL timeout if too much data had to be deleted
Core - Fixed an issue where serialization error was raised during vault import from .rdx file
Core - Fixed an issue where user was logged in automatically after a force logout by the application
Core - Fixed SSO login with Workspace Browser Extension
PAM - Fixed an issue where PAM account attributes could not be updated if provider was unreachable
Web - Several UI fixes

2023.3.18.0

·May 23, 2024

2023.3.17.0

·April 17, 2024

2023.3.16.0

·March 8, 2024

Security1 Fixes2

2023.3.14.0

·February 7, 2024

Fixes7

2023.3.13.0

·December 19, 2023

Improvements1 Fixes2

2023.3.12.0

·December 13, 2023

Security1 Improvements2 Fixes2

2023.3.10.0

·November 29, 2023

Improvements4 Fixes5

2023.3.8.0

·November 21, 2023

2023.3.7.0

·November 13, 2023

2023.3.6.0

·November 7, 2023

Improvements3 Fixes5

2023.3.5.0

·November 3, 2023

Breaking1 Features19 Improvements12 Fixes11

2023.3.4.0

·November 1, 2023

Breaking

1

Core - Removed support of legacy security

New features

19

Core - Advanced search can now specify the operation between filters
Core - Dashboard can show card only if data is present
Core - Include archived data in reports
Core - New user settings to show/hide specific entries (archived, disabled, expired) in the tree
Core - Push notifications to Workspace can be enabled/disabled
Core - Support new license format
Core - Support of tags on users
Core - Support Windows Authentication through the web interface
Core - Temporary access can now be requested on credentials
Core - User behavior analytics is available on the system dashboard
Core - User interface profile can now be used to simplify the web interface
Core - Users can be synchronized with their identity provider
PAM - Allow user to send checkout requests to all approvers
PAM - Checkout request can be assigned to a user to help in the approval process
PAM - Just In Time (JIT) elevation for provider Azure AD
PAM - Propagation can now be configured on every level: vaults, folders, and entries
PAM - Support of PAM Active Directory provider through Devolutions Gateway
Web - SSH and Telnet sessions can now be launched through Web Client (via Devolutions Gateway)
Web - System vault can be edited in the web interface

Improvements

12

Core - 'Force token public IP validation' setting is now false by default
Core - An email is sent to the administrator when the scheduler is down
Core - By default, on new installation, log cleanup is configured
Core - Default value to enable DWL for Website entry is now available
Core - Security dashboard shows if offline is available on vaults
Core - Support new entries in the web interface: firearm, insurance number and access code
Core - Use X-Forwarded-For configuration is disabled by default in the new installation
Core - Workspace can be configured by scanning a QR code available in the web interface
Core- Added an icon to the Expired Entry List to show that a password is re-used
Gateway - Added the Gateway ID in the web interface
PAM - Improve PAM usage policies to support more context where PAM accounts can be used
PAM - PAM section is now always visible even without a license

Fixes

11

Core - Fix slowness issues when temporary access was enabled
Core - Fixed an issue when the list of forbidden passwords disappeared when too large
Core - Fixed an issue where Okta users could not be created on first login
Core - Fixed an issue where scheduled reports were not adjusted by daylight saving time
Core - Fixed an issue with the notifications which creates a lot of log
Core - Fixed an issued with variables that were not well resolved in the vault
Gateway - Fixed an issue with Gateway Health to improve performance
PAM - Fixed a performance issue when requesting a PAM vault request
PAM - Fixed an error when Domain Controller was not specified in the AD provider
PAM - Fixed an issue that prevented manual check-in when a checkout had timed out
Web - Several UI fixes

2023.2.11.0

·November 9, 2023

2023.2.10.0

·October 24, 2023

2023.2.9.0

·October 3, 2023

Security1 Fixes2

2023.2.8.0

·September 20, 2023

Improvements1 Fixes3

2023.2.7.0

·September 11, 2023

Fixes9

2023.2.6.0

·August 21, 2023

Fixes8

2023.2.5.0

·July 25, 2023

Features12 Improvements14 Fixes5

2023.2.4.0

·July 18, 2023

Improvements1 Fixes8

2023.2.3.0

·July 6, 2023

Improvements2 Fixes5

2023.2.2.0

·June 27, 2023

Improvements5 Fixes5

2023.2.1.0

·June 20, 2023

New features

12

DeprecatedRecording Server - Devolutions Gateway should be used to act as recording server
Core - Added a search tool in System Settings
Core - Added IP List entry type
Core - Added PowerShell Terminal Remoting Directly in the Web Interface
Core - Added the ability to assign a vault owner
Core - Added the ability to link two user accounts to the same license
Core - Added the ability to request access to other vaults
Gateway - Devolutions Gateway can now act as recording server
Gateway - Devolutions Gateway can now be configured for load balancing
PAM - Added temporary just-in-time(JIT) elevation at checkout
PAM - Added the ability to propagate PAM passwords to after rotation
PAM - Expanded privileged account availability with PAM usage policies

Improvements

14

Core - Added more information in log for login information (IP, iso code, emergency access)
Core - Changed default strategy for AD "Get groups by user" from Principal to Directory entry token group
Core - Current and latest version of services/gateways are now shown in the system dashboard
Core - Dashboard user interface improvement
Core - SMTP server and Syslog server status are now shown in the system dashboard
Core - Temporary access can be created by the approver and permission will be granted to the user at the right moment
Core - Temporary access can be requested on entry with link to other entries for credentials, vpn
Core - Temporary access request can now be requested for future use
Core - Upgraded System Dashboard with Syslog and Email Services
PAM - Added more information in logs when an error occurs
PAM - Added PAM checkout requests in advance
PAM - Checkout request can be created by the approver and permission will be granted to the user at the right moment
PAM - New setting to limit the checkout time
PAM - Scripts in AnyIdentity providers can now be ran as a specific user

Fixes

5

CVE-2023-2400 Improper deletion of resources in the user management feature
Core - Fixed an issue where search entries failed if current vault contains special character (%) in description
Core - Security Policies is now renamed Conditional Access Policies
Core - Submit a support ticket is available only for admin
Web - Several UI fixes

2023.1.8.0

·May 25, 2023

Features10 Improvements20 Fixes8

2023.1.7.0

·May 9, 2023

Improvements2 Fixes6

2023.1.6.0

·April 21, 2023

Security1 Fixes6

2023.1.5.0

·March 30, 2023

Improvements2 Fixes5

2023.1.4.0

·March 22, 2023

Improvements4 Fixes6

2023.1.3.0

·March 14, 2023

New features

10

Core - Added support for global images
Core - An issue on an entry can now be reported to notify administrators
Core - Notifications can now be sent to devices running Workspace
PAM - Added a function to generate script headers of AnyIdentity Providers
PAM - Added a function to test Powershell scripts of AnyIdentity Providers
PAM - AnyIdentity Providers can now be imported/exported
Web - Added System Dashboard to display services state
Web - Improved the dashboard to be customizable
Web - RDP session can now e launched through Web Client (via Devolutions Gateway)
Web - VPN/Gateway can now be edited in Web Interface

Improvements

20

Core - Added a new contact type Team/Department
Core - Added a new IT Asset data entry type
Core - Added a new vehicle data entry type
Core - Added a report to find connections with specific status
Core - Added a warning message if less than 10% of a license is available
Core - Added an Archived and Broken Entry status
Core - Added contact link support in Software/License entry
Core - Added many reports in the scheduled report list
Core - Added password generator button in certificate entry
Core - Added the possibility to assign a contact to the credit card owner
Core - Microsoft Authentication cache can now be desactivated
Core - User information from Microsoft users are now synchronized with DVLS users
Gateway - A reg file or a Powershell Script can be downloaded to configure KDC proxy
PAM - Added a link to PAM Provider GitHub repository in AnyIdentity Templates
PAM - Added timeout setting for SSH local user provider
PAM - Renamed Custom Providers by AnyIdentity Providers
Web - Added custom fields edition
Web - Information on dashboard can now be clicked to see the specific information
Web - Moved DVLS license information under Administration -> License
Web - Vaults can now be searched by description

Fixes

8

Core - Fixed an issue where authentication cache was used even if it was disabled
Core - Fixed an issue where copy password button was not available in the overview when it should
Core - Fixed an issue where message about http connection in system dashboard was displayed even if the connection was https
Core - Fixed an issue where scheduled AD synchronizer created incorrect folder names
Core - Fixed an issue where users were not logged in even if the credentials were valid
Core - Fixed issue where administrators were not able to use Launcher
Web - Minor UI fixes
Web - Several UI fixes

2022.3.13.0

·February 21, 2023

Security4 Fixes3

2022.3.12.0

·February 13, 2023

Features1 Improvements1 Fixes6

2022.3.10.0

·February 2, 2023

Security1 Fixes4

2022.3.9.0

·January 24, 2023

2022.3.8.0

·December 21, 2022

Improvements2 Fixes3

2022.3.7.0

·December 13, 2022

Improvements4 Fixes4

2022.3.6.0

·December 1, 2022

Improvements1

2022.3.5.0

·November 25, 2022

Improvements3 Fixes9

2022.3.4.0

·November 10, 2022

Improvements8 Fixes9

2022.3.3.0

·November 3, 2022

Breaking2 Features12 Improvements17 Fixes25

2022.3.2.0

·November 1, 2022

Breaking

2

Core - RDM User license must be set in the data source
Core - RDM users need one license assigned for each user account

New features

12

Core - Added a way to migrate users from an authentication mode to another (from Active Directory to Azure AD for exemple)
Core - Added permission set to assign permission easily on users
Core - Added support to Okta authentication
Core - Added support to SMTP modern authentication with Azure
Core - Implemented attachment and documentation support for sub connections
Gateway - Added Kerberos authentication via KDC Proxy
Gateway - Added new reports to display Devolutions Gateway permission
Gateway - Added permissions on Devolutions Gateway
Gateway - Sessions launched via Devolutions Gateway can now be killed
PAM - Added description field on PAM account
PAM - Added support for generic providers
Web - Added markdown WYSIWYG documentation editor

Improvements

17

Core - Added a button to refresh favorites
Core - Added a way to select the main account type to bypass the authentication type on login
Core - Added an option to select Azure behavior on login
Core - Added one button in login page for each Active Directory configured
Core - Added options to select Azure behavior on login
Core - Added support for multiple emails in email configuration
Core - Button label can now be configured in login page
Core - Connection icon can now be customized
Core - Improved RDM connection stability with Devolutions Server
Core - Improved security dashboard UI
Core - Removed the option "Current Windows session" as credentials for AD configuration
Core - Renamed 'Custom User' by 'Devolutions Server User'
Gateway - Added a filter in the Devolutions Gateway list
PAM - Added log messages if PAM password propagation failed
PAM - Added possibility to include PAM vaults in search side bar
PAM - Changed the way PAM account are displayed: Removed tiles and display a tree
PAM - Improved PAM Heartbeat failed message to differentiate provider and account name

Fixes

25

Core - Fixed an issue where administrator received an exception about telemetry when internet was not available
Core - Fixed an issue where attachments were corrupted after download
Core - Fixed an issue where backup was failing with invalid path on Linux SQL Server
Core - Fixed an issue where folder structure was visible in DWL even if user didn't have access to the folder
Core - Fixed an issue where importing Azure AD accounts didn't fill the first and last name
Core - Fixed an issue where license capacity could be exceeded
Core - Fixed an issue where Okta groups were recognized as Devolutions Server groups
Core - Fixed an issue where Okta groups were viewed as Devolutions Server groups
Core - Fixed an issue where password set on an attachment was not shown correctly
Core - Fixed an issue where read only users could add attachments or documentation
Core - Fixed an issue where SMTP configuration was not migrated correctly
Core - Fixed an issue where success page was prompted after Windows Authentication
Core - Fixed an issue where user update could lost user group assignments
Core - Fixed an issue where username field could be missing in Emergency Login
Core - Fixed an issue where users avatar were missing
Core - Fixed an issue where Website entry could not be saved with a Password Management license
Core - Fixed an issue where wrong RDM version was loged in reports
Core - Fixed issue in My Account Settings where Dashlane Password and KeePass Server Password were not obfuscated
Core - Fixed issue where email could not be sent in some cases
Core - Removed sensitive information from public endpoint
PAM - Added log message if password propagation failed
PAM - Fixed an issue where PAM section was not available even with a license
Web - Several UI fixes
Web - Several UI fixes
Web - Several UI fixes

2022.2.11.0

·October 3, 2022

2022.2.10.0

·September 6, 2022

2022.2.9.0

·August 23, 2022

Breaking3 Features10 Improvements14 Fixes23

2022.2.8.0

·July 29, 2022

Improvements4 Fixes5

2022.2.6.0

·July 11, 2022

Improvements3 Fixes10

2022.2.5.0

·July 4, 2022

Breaking

3

Core - .NET 6.0 is now required
Gateway - Devolutions Gateway now requires a license (unlicensed usage will be refused except for side-by-side installation that can have up to 5 concurrent sessions without a license)
Core - Website entry (previously "Web Browser (HTTP/HTTPS)") now has Workspace browser extension enabled by default

New features

10

Core - Emergency access to allow an access even if providers are down (Azure or AD)
Core - New permission : "Delete Documentation"
Core - New permission : "View Sensitive"
Core - Notifications : Users can be notified on actions made on entries
Core - Security policies available to allow/deny users with different conditions
Core - Security policies available to force/skip 2FA with different conditions
Gateway - Support for new protocols : VNC, ARD, SCP, SFTP, PowerShell (WinRM, SSH), Embedded Websites
PAM - Add link with ticketing system (JIRA) to list tickets during the checkout operation
PAM - Support for password reset for MySQL users, Oracle users and Cisco users
PAM - Support for standalone privileged accounts

Improvements

14

Core - Added "append to the username" and "prepend to the username" modes for OTP usage
Core - Added a button to test ticketing system configuration
Core - Added more fields in asset dashboard (UPN, custom fields)
Core - Allow restoring deleted documentation pages
Core - Dashboard page has been removed and integrated on vault dashboard to be like RDM
Core - Redesign the login page
Core - Redesign the web interface
Core - Removed sensitive data from user list
Core - Security improvement: use new function (PBKDF2-HMAC-SHA1) to calculate the password hash
Core - Show the group name or username in permission table
Core - Support exporting/importing the documentation of an entry
PAM - Added filters for providers and scan configurations
PAM - Improve the reset password confirmation prompt
PAM - Renamed Team Folder by PAM Vault

Fixes

23

Core - Fixed an issue where 2FA was bypassed when connecting with Windows Authentication
Core - Fixed an issue where adding images in documentation was raising an error
Core - Fixed an issue where Azure AD user can't be imported manually
Core - Fixed an issue where Entry Security Analyzer report was not available for user with permission
Core - Fixed an issue where microsoft user was not able to login if he had been added manually
Core - Fixed an issue where the client IP was not set properly
Core - Fixed an issue where user couldn't access the gateway configuration even if he had the permission
Core - Fixed an issue where user remains connected after disconnecting him through 'Connected user list'
Core - Fixed an issue where wrong RDM versions were saved in Login History report
Core - Fixed diagnostic report to be the same as RDM
Core - Fixed issue where a new user could have rights if a user with the same name has already existed
Core - Fixed security issue by processing "Entry Security Analyzer" permission
Core - Improved error message when vault name already exists
Core - Removed the vault assignment window when importing users. Vaults from user template are used
PAM - Fixed an issue where a folder could not be deleted
PAM - Fixed an issue where all accounts were returned for a non admin user
PAM - Fixed an issue where view roles definitons couldn't be access from quick scan
PAM - Fixed an issue where windows scan failed if no local user exist
PAM - Removed redirect URI field in Azure AD provider configuration
Web - Fixed an issue where long vault name with hyphen broke the avatar
Web - Fixed an issue where multiple or wrong vault icon were shown
Web - Fixed an issue where view password button could disappear in the entry overview
Web - Several UI fixes

2022.1.13.0

·May 11, 2022

Breaking1 Features1 Improvements4 Fixes8

2022.1.12.0

·April 4, 2022

Improvements5 Fixes7

2022.1.10.0

·March 15, 2022

Improvements11 Fixes6

2022.1.9.0

·February 18, 2022

Breaking1 Improvements3 Fixes7

2022.1.7.0

·February 15, 2022

Breaking5 Features7 Improvements28 Fixes26

Breaking

5

Core - .NET Framework 4.8 is now required
Core - HTTPS is strongly recommended, application encryption level will be removed
Core - Initial OAuth support. Windows authentication is no longer supported with 2FA
Gateway - Devolutions Gateway now requires a license (unlicensed usage will show a warning)
DWL has to be logged in separately

New features

7

Core - Email notifications for temporary access
Core - Support for DVLS PAM entry
Gateway - License integration
Gateway - SSH connection support
PAM - Azure AD Provider
PAM - Local Windows Accounts Provider
PAM - PAM Dashboard in Remote Desktop Manager

Improvements

28

Core - "DNS Name" has been replaced by "Access URI"
Core - Added "Privileged Account" on the folder credential option
Core - Added a group filter in import AD Users dialog
Core - Added server and client IP address in syslog messages
Core - Added UserInfoHistory in the cleanup logs feature
Core - Don't accept domain with functional level too low
Core - Fixed an issue where user can't be imported if a domain was down
Core - Improved multi vault search performance
Core - Search results in passwords list
Core - Sort TAGS in the dashboard and tag selection dialog
Core - Support for new RDM file format (v2) to import
Gateway - Added option "Force using IP address for RDP connections"
Gateway - Added support for alternate hosts
Gateway - Support inherited Gateway
PAM - Added a password template at provider level
PAM - Added scan delta summary
PAM - Improved error message on synchronization status
PAM - Move all PAM Account at root level in a team folder
Web - Added 'Assign All Vaults' button in users and user groups dialogs
Web - Added a few SSH properties in Edit view
Web - Added a search bar in 'Privileged account credential' type selection
Web - Added a warning on entry deletion if a shortcut exist
Web - Added icon in PAM UI to help color blind people
Web - Added shortcut icon in vault tree
Web - Only admin user can submit a support ticket
Web - Rebranded Devolutions Authenticator to Devolutions Workspace
Web - Sort approvers in PAM checkout dialog
Web - Support DVLS PAM entry in web interface

Fixes

26

Core - DVLS Free doesn't support PAM
Core - Fixed an issue to display the right number of users in a license
Core - Fixed an issue where "Automatic User Creation" parameter was not saved
Core - Fixed an issue where "Prompt for comment" was not displayed with "Copy API key"
Core - Fixed an issue where a user without the view password permission could view the password
Core - Fixed an issue where changing the time for O365 caching was not saved
Core - Fixed an issue where custom user groups can not be created without custom authentication activated
Core - Fixed an issue where documentation view was wrong
Core - Fixed an issue where Duo returns invalid 2FA with a domain user
Core - Fixed an issue where entries with temporary access were not sent back to DWL
Core - Fixed an issue where export vault was not logged
Core - Fixed an issue where password in passwords list could be lost
Core - Fixed an issue where passwords in private vault were not available in web interface
Core - Fixed an issue where RDM connection to DVLS failed
Core - Fixed an issue where RDM was disconnected from DVLS
Core - Fixed an issue where some folders in vaults were not available in RDM
Core - Fixed an issue where ticket number was not saved in activity logs
Core - Fixed an issue where user was not able to login
Core - Fixed issue where date format was wrong
Core - Fixed Syslog message format to set the hostname with DVLS IP
Core - Include Local Account entries in password rotation reports
PAM - Fixed an issue where PAM checkouts failed with a non-admin user
Web - Fixed an issue where view attachment with pdf extension failed
Web - Fixed translation strings
Web - Several UI fixes
Web - Several UI fixes

2021.2.14.0

·December 13, 2021

Breaking1 Features8 Improvements16 Fixes3

2021.2.13.0

·November 18, 2021

Improvements4 Fixes5

2021.2.10.0

·October 25, 2021

Improvements4 Fixes9

2021.2.8.0

·October 4, 2021

2021.1.20.0

·July 19, 2021

Features3 Improvements6 Fixes8

2021.1.19.0

·June 30, 2021

Security1 Fixes1

2021.1.17.0

·June 17, 2021

2021.1.10.0

·May 11, 2021

Fixes4

2021.1.9.0

·April 16, 2021