| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | < 2025.3.16.0 | 2025.3.16.0 |
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an arbitrary Entra ID user via a forged JSON Web Token (JWT).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free