Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-12105

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DEVOLUTIONS

Description

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devolutions Devolutions Server

Default version status: unaffected

  • 0 to < 2026.2.5affected
  • 0 to < 2026.1.21affected

References