Devolutions Remote Desktop Manager Password Saving Vulnerability

A vulnerability exists in Devolutions Remote Desktop Manager in versions through 2025.3.30 that improperly enforces the setting to disable password saving in vaults. This flaw allows authenticated users to save credentials in vault entries, potentially exposing sensitive information to other users. The issue arises when certain connection types are created or edited while password saving is disabled.

Impact

Exploitation of this vulnerability could lead to unauthorized credential storage in vaults, allowing sensitive information to be shared with other users.

Remediation

Users are advised to upgrade to Devolutions Remote Desktop Manager version 2026.1.