Devolutions Server Version 2026.2.19.0 (October 6, 2026)

If you are using a client (RDM, PowerShell, etc.), version 2026.2 is required for this DVLS version

FIXES

• SECURITY Core - Fixed an authorization issue that allowed low-privileged users to delete and restore vault attachments from the attachment history
• SECURITY CVE-2026-105488 Core - Fixed an account takeover risk involving phishing through the device code authentication flow
• SECURITY CVE-2026-105488 Core - Fixed an authorization issue that allowed unauthorized users to read, modify, or delete Global Contact and Folder entries
• SECURITY CVE-2026-9226 Core - Fixed an account takeover risk where Azure AD login session tokens could be replayed
• Web - Fixed an issue where users with Add but no Edit permission on a folder couldn't add a Document entry stored in the database

** CONSOLE RELEASE NOTES **

IMPROVEMENTS

• Minor update