CVE-2026-17568

Improper access control in the role membership management endpoint of Devolutions Server enables authenticated non-administrative users with specific permissions to escalate their privileges to administrator level through a crafted API request. This vulnerability poses a significant risk as it allows unauthorized access to sensitive administrative functions, potentially compromising the integrity and security of the server. Organizations using affected versions of Devolutions Server should prioritize immediate remediation to mitigate the risk of privilege escalation attacks.