Devolutions Server Privilege Escalation Vulnerability in User Group Management

A privilege escalation vulnerability has been identified in Devolutions Server versions through 2025.1.7.0. The issue arises from improper access control in user group management, allowing non-administrative users with 'User Management' and 'User Group Management' permissions to add users to groups with administrative privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling users to gain administrative rights they should not have.

Remediation

Users are advised to upgrade to Devolutions Server version 2025.1.9.0 or higher.