CVE-2023-1603: Devolutions Server

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Affected products

• Devolutions Devolutions Server: before 2023.1.3.0 (fixed in 2023.1.3.0)

Published 2023-04-02. Last modified 2026-06-17.