Medium · 6.5 CVE-2025-13683 EUVD-2025-199879GHSA-458g-vvmf-jfgq

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Serv…

Published Nov 28, 2025 · Updated Nov 28, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Remote Desktop Manager Product: Server

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Server	≤ 2025.3.8.0	—
Devolutions	Remote Desktop Manager	≤ 2025.3.23.0	—

Advisories 1

WID-SEC-2025-2697 Devolutions Remote Desktop Manager und Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 30, 2025

References

https://devolutions.net/security/advisories/DEVO-2025-0017/