CVE-2026-2590
CRIT 9.8Improper
enforcement of the Disable password saving in vaults setting in the
connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries,
potentially exposing sensitive information to other users, by creating
or editing certain connection types while password saving is disabled.
Affected Applications in Environment
62
Desktop
v4.67.0 (4.67.0.5)
2 devices
Desktop
v4.44.3
2 devices
Desktop
v4.40.0
1 device
Desktop
v4.41.2 (4.41.2.20)
2 devices
Desktop
v4.62.0 (4.62.0.11)
2 devices
Desktop
v3.5.2
1 device
Desktop
v4.63.0 (4.63.0.11)
3 devices
Desktop
v4.38.0
1 device
Desktop
v4.66.0 (4.66.0.6)
4 devices
Desktop
v4.62.0.11
1 device
Desktop
v4.37.1
2 devices
Desktop
v4.5.1
1 device
Desktop
v4.44.2.33
1 device
Desktop
v3.1.0
1 device
Desktop
v4.39.0
1 device
Desktop
v4.17.1
2 devices
Desktop
v4.59.0
2 devices
Desktop
v4.5.1.5
1 device
Desktop
v4.26.1
1 device
Desktop
v4.25.1
1 device
Desktop
v4.33.1
1 device
Desktop
v4.64.0 (4.64.0.4)
3 devices
Desktop
v4.60.1.12
1 device
Desktop
v4.29.0
1 device
Desktop
v4.5.1.74721
1 device
Desktop
v4.67.0.5
1 device
Desktop
v4.53.0 (4.52.0.4)
1 device
Desktop
v4.65.0 (4.65.0.4)
4 devices
Desktop
v4.44.2
1 device
Desktop
v4.50.0 (4.50.0.5)
1 device
Desktop
v4.58.0.9
1 device
Desktop
v4.40.0.17
1 device
Desktop
v4.66.1 (4.66.1.8)
3 devices
Desktop
v4.27.2
1 device
Desktop
v4.55.0.16
2 devices
Desktop
v4.55.0
1 device
Desktop
v4.61.0 (4.61.0.14)
1 device
Desktop
v4.43.2
1 device
Desktop
v4.48.0
1 device
Desktop
v2.0.0.3
1 device
Desktop
v4.63.0
1 device
Desktop
v4.44.3.41
1 device
Desktop
v4.18.0
1 device
Desktop
v4.62.0
1 device
Desktop
v4.63.0.11
1 device
Desktop
v4.59.0.11
1 device
Desktop
v4.43.1
1 device
Desktop
v4.67.0
1 device
Desktop
v4.3.0
1 device
Desktop
v4.41.2
1 device
Desktop
v4.60.1
1 device
Desktop
v4.41.2.20
1 device
Desktop
v4.49.0 (4.49.0.17)
1 device
Remote Desktop
v1.2.6873.0
1 device
Remote Desktop
v1.2.7046.0
7 devices
Remote Desktop
v1.2.5105.0
1 device
Remote Desktop
v1.2.6676.0
1 device
Remote Desktop
v1.2.6074.0
1 device
Remote Desktop
v1.2.6353.0
1 device
Remote Desktop
v1.2.6187.0
1 device
Remote Desktop Manager
v2025.3.29.0
1 device
Remote Desktop Manager
v2025.3.6.7
1 device
Affected Devices
61
AFROTC-HPENB-02
Windows
AFROTC-HPENB-04
Windows
AFROTC-HPENB-07
Windows
ARMY-DABR-D3510
Windows
ARMY-SORE-D5520
Windows
ARMY-TGOO-D5520
Windows
ARSUTLGU4FRRGEO
Windows
ASPIRE-170816
Windows
DESKTOP-A27UL0P
Windows
DESKTOP-H4GPOR0
Windows
DESKTOP-QO5C653
Windows
DPAERO-2TK33905
Windows
DPAERO-K02607L1
Windows
DPAERO-K33905G3
Windows
DPCONT-6QQ5853
Windows
DPCONT-F4F0CY3
Windows
DPCPD-8N0184227
Windows
DPEBIE-5171H8C
Windows
DPEDUC-2UA71626
Windows
DPEMAE-8232PP9
Windows
DPENGR-HDJG664
Windows
DPHSOB-1NXC094
Windows
DPHSOB-31J1H13
Windows
DPHSOB-3220NVS
Windows
DPINFT-5502005K
Windows
DPINFT-PF1TA1PH
Windows
DPMLSC-4LPWFF4
Windows
DPTLTC-G414186D
Windows
DPUWRL-PF55KEY4
Windows
DPUWRL-PF5C7SY3
Windows
DPUWRL-PF5TGLWN
Windows
DPVPRS-73BXY44
Windows
Dallins-MacBook-Pro-2.local
Mac
F-16
Mac
HDTS171840
Windows
HTTS171501
Windows
JORDAN-YOGA-9I
Windows
LAPTOP-6UP13PGQ
Windows
LAPTOP-NLGVL17C
Windows
MURF-CLUNKER
Windows
RobertsMacbookPro.local
Mac
SSWA-ATEM-D9010
Windows
TEAL-5CG3473FT0
Windows
TROOPER2
Windows
USULOAN340
Windows
USULOAN429
Windows
WIBCTE2108-02
Windows
Zhiyuns-MacBook-Pro.local
Mac
a00288946-F6VM65M2H3
Mac
a00295943-YF4WY76Q4D
Mac
a00957369-K6KVHY00C5
Mac
a01513577-M7GJNF6XQR
Mac
a01841079-LK4T0Y7FP4
Mac
a01875599-TY6TF9Y69L
Mac
a02273884-FYQGVQ1TFP
Mac
a02490072-PCVFY9PJV6
Mac
adamthomas-H73N967GM2
Mac
admin.integrations's iMac -H12CRHNTJV40
Mac
ah-mbp.lan
Mac
ken-mpb16-LG9VYFY7QD
Mac
mdm-mbp16-5.local
Mac