Medium · 4.3 CVE-2025-13765 EUVD-2025-199830GHSA-rfqv-p642-8f8q

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: b…

Published Nov 27, 2025 · Updated Dec 1, 2025 · Assigned by DEVOLUTIONS

Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Server	< 2025.2.21, < 2025.3.9	2025.2.21

Advisories 1

WID-SEC-2025-2695 Devolutions Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2025

References

https://devolutions.net/security/advisories/DEVO-2025-0018/