CVE-2026-4829 — Devolutions / Server

CVE-2026-4829

Devolutions / Server PUBLISHED

Description (CNA)

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.

Affected (CNA)

Vendor / product	Versions
Devolutions / Server	affected 0 through 2026.1.11

CWE

CWE-287

References

https://devolutions.net/security/advisories/DEVO-2026-0010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.