Threats tagged 'ghsa-vg8w-fchf-fp5q'

An improper access control vulnerability exists in the autofill vault search feature of Devolutions Server version 2026.3.13.0 and earlier. This flaw allows an authenticated user with only view permissions on a shared entry to retrieve the password in clear text by leveraging a linked credential entry in their private vault.