Security Advisory
CVE-2026-4829
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.