CyberRota Analysis
AI-GeneratedAn improper authorization vulnerability in the access request status endpoint of Devolutions Server allows authenticated low-privileged users to approve their own pending access requests without the necessary approver review. This flaw can lead to unauthorized access to sensitive resources, potentially compromising the integrity of the system. Organizations using affected versions of Devolutions Server should prioritize patching this vulnerability to mitigate the risk of unauthorized access.
Original NVD Description
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoint, bypassing the required approver review.
Related CVEs
Other vulnerabilities affecting the same vendor(s)