| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | < 2026.1.12.0 | 2026.1.12.0 |
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free