Devolutions Remote Desktop Manager User Vaults Information Exposure Vulnerability

A vulnerability in the user vaults component of Devolutions Remote Desktop Manager has been identified, allowing an authenticated user to access private personal information of others without authorization. This issue arises under certain conditions where entries may unintentionally shift from user vaults to shared vaults when edited, thereby becoming accessible to other users. The vulnerability affects Remote Desktop Manager Windows versions through 2025.1.34.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private personal information stored in user vaults, potentially allowing for misuse of that information.

Remediation

Users are advised to upgrade to Devolutions Remote Desktop Manager Windows version 2025.1.37.0 or higher.