| Package | Affected versions | Patched versions |
|---|---|---|
| remote desktop manager | ≥ 2026.2.5.0, ≤ 2026.2.12.0 |
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name collision with an existing VPN script link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free