CVE-2026-13372

Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name collision with an existing VPN script link.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://devolutions.net/security/advisories/DEVO-2026-0021/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Resolución incorrecta de enlaces por nombre para mostrar en el editor de VPN de PowerShell personalizado en Devolutions Remote Desktop Manager 2026.2.5 hasta 2026.2.11 permite a un atacante autenticado con acceso de escritura a un espacio de trabajo compartido ejecutar un script de PowerShell en el contexto de otro usuario a través de una colisión de nombres para mostrar con un enlace de script VPN existente.

Information

Published : 2026-06-26 19:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-13372

Mitre link : CVE-2026-13372

CVE.ORG link : CVE-2026-13372

JSON object : View

Products Affected

devolutions

remote_desktop_manager

CWE

CWE-706

Use of Incorrectly-Resolved Name or Reference

{"id": "CVE-2026-13372", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13372", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-26T19:24:36.727911Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "security@devolutions.net", "affectedData": [{"vendor": "Devolutions", "product": "Remote Desktop Manager", "versions": [{"status": "affected", "version": "2026.2.5", "lessThan": "2026.2.11", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-26T19:16:39.897", "references": [{"url": "https://devolutions.net/security/advisories/DEVO-2026-0021/", "tags": ["Vendor Advisory"], "source": "security@devolutions.net"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@devolutions.net", "description": [{"lang": "en", "value": "CWE-706"}]}], "descriptions": [{"lang": "en", "value": "Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name collision with an existing VPN script link."}, {"lang": "es", "value": "Resoluci\u00f3n incorrecta de enlaces por nombre para mostrar en el editor de VPN de PowerShell personalizado en Devolutions Remote Desktop Manager 2026.2.5 hasta 2026.2.11 permite a un atacante autenticado con acceso de escritura a un espacio de trabajo compartido ejecutar un script de PowerShell en el contexto de otro usuario a trav\u00e9s de una colisi\u00f3n de nombres para mostrar con un enlace de script VPN existente."}], "lastModified": "2026-10-25T17:10:00.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "00D629B0-8254-4BC1-9996-6CF28F091255", "versionEndIncluding": "2026.2.12.0", "versionStartIncluding": "2026.2.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@devolutions.net"}