Threats tagged 'ghsa-prr7-6j7r-qgjg'

An authorization flaw in Devolutions Server 2026.3.10.0 and earlier allows authenticated non-administrative users to bypass Network Access Rules on virtual gateways. This occurs via wildcard additional destinations included in the gateway token, enabling access to hosts that should be denied.