Volerion logoVolerion
Volerion logoVolerion

Devolutions Server Improper Access Control Vulnerability in Vault Documentation Feature

Vulnerability

A vulnerability exists in the vault documentation feature of Devolutions Server versions through 2026.1.14.0. This improper access control allows an authenticated attacker to read documentation from unauthorized vaults by sending a crafted API request.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive documentation content from restricted vaults.

Remediation

Users are advised to upgrade to Devolutions Server version 2026.1.15.0 or higher.

Added: Apr 28, 2026, 2:19 PM
Updated: Apr 28, 2026, 2:19 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.6
exploitability
5.2
remediation
7.7
relevance
6.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.