Description
Improper input validation in the SSH Elevate Shell feature allows an authenticated user
with permission to create or modify a shared SSH entry to execute
arbitrary commands on a remote SSH host using stored elevation
credentials via a crafted alternate username and user interaction with
the Elevate Shell action.
This affects :
- Remote Desktop Manager 2026.2.5.0 through 2026.2.7.0
- Remote Desktop Manager 2026.1.23.0 and earlier
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Remote Desktop Manager | 2026.2.5.0 – ≤ 2026.2.7, ≤ 2026.1.23.0 | — |
Advisories 1
- WID-SEC-2026-1910 Devolutions Remote Desktop Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 15, 2026