Devolutions Remote Desktop Manager Autotyping Feature Insufficient Logging Vulnerability

A vulnerability exists in the autotyping feature of Devolutions Remote Desktop Manager for Windows, specifically in versions 2025.1.24 through 2025.1.25 and all versions up to 2024.3.29. This vulnerability allows an authenticated user to utilize a stored password without creating a log entry, by exploiting the autotyping functionality.

Impact

Exploitation of this vulnerability allows for the use of stored passwords without generating log events, potentially leading to unauthorized access or actions being performed without proper accountability.

Remediation

Users can upgrade to Devolutions Remote Desktop Manager version 2024.3.31 or 2025.1.26 or later to address this vulnerability.