Security Advisory

CVE-2025-11957

8.4
HIGH

Vulnerability Description

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.
Published Date October 22, 2025
Official Source NIST NVD Advisory