CVE-2025-1635: Devolutions Remote Desktop Manager

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data source to include his authenticated session in the export due to faulty business logic.

Affected products

• Devolutions Remote Desktop Manager: before 2024.3.31.0 (fixed in 2024.3.31.0)

Published 2025-03-13. Last modified 2026-06-17.