Threats tagged 'ghsa-c4fg-q98q-r57v'

Devolutions Server versions 2026.3.13.0 and earlier contain an improper access control vulnerability in the administrative role assignment endpoint. This flaw allows an authenticated user with limited vault assignment management rights to escalate their privileges and access vault entry passwords by sending a specially crafted role assignment request.