CVE-2026-12117
Severity CVSS v4.0:
Pending analysis
Type:
CWE-200
Information Leak / Disclosure
Publication date:
16/06/2026
Last modified:
16/06/2026
Description
Improper access control in the social login connection endpoint in <br />
Devolutions Server 2026.2.5 allows an authenticated vault member to <br />
enumerate social login entry metadata to which they are not authorized <br />
via a crafted API request.