What the vulnerability does

01Description

Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking feature when the Devolutions hosted endpoint is not reachable.

Key dates

02Disclosure timeline

June 5, 2025 CVE published
June 5, 2025 Record updated