CVE-2026-12105 PUBLISHED

Assigner: DEVOLUTIONS
Reserved: 12.06.2026 Published: 16.06.2026 Updated: 16.06.2026

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions.

Product Status

Vendor Devolutions
Product Devolutions Server
Versions Default: unaffected
  • affected from 0 to 2026.2.5 (excl.)
  • affected from 0 to 2026.1.21 (excl.)

References

Problem Types

  • CWE-862 CWE