CVE-2023-6288: Devolutions Remote Desktop Manager

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIB_INSERT_LIBRARIES environment variable.

Affected products

  • Devolutions Remote Desktop Manager: before 2023.3.10.2 (fixed in 2023.3.10.2)

Published 2023-12-06. Last modified 2026-06-17.