CVE-2023-4417: Devolutions Remote Desktop Manager

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.

Affected products

• Devolutions Remote Desktop Manager: up to and including 2023.2.19

Published 2023-08-21. Last modified 2026-06-17.