Devolutions Server Version 2026.3.11.0 (October 21, 2026)

If you are using a client (RDM, PowerShell, etc.), version 2026.3 is required for this DVLS version

IMPROVEMENTS

• Core - Added a forced password change at first sign-in for the default dvls-admin account in the Docker image, so no hardcoded default password stays in use
• Core - Blocked uploads that would lose data from Spreadsheet documents saved by affected RDM versions. DVLS now keeps the previous full workbook and logs a warning
• Web - Added the ability to manage "My personal credentials" and "My privileged account" from the web interface

FIXES

• SECURITY Core - Fixed an issue where applying a vault template could bypass entry security
• SECURITY Core - Fixed MFA secrets being exposed in the user list response
• SECURITY Core - Fixed missing authorization checks that let users create and edit account discovery scans on providers they could not manage
• SECURITY Gateway - Fixed an issue where Devolutions Gateway token destinations could bypass virtual gateway Network Access Rules
• SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM accounts and overwrite PAM providers
• SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM AD computers and create PAM sub-providers
• Core - Fixed approval emails not reaching user group members when a temporary access request was sent to a user group
• Core - Fixed RDM PowerShell cmdlets failing with "Unexpected exception" when loading a DVLS workspace without permission to view user groups
• Core - Fixed Set-DSEntityPermission resetting View and replacing existing rights when the OverrideExistingPermissions switch was not used
• Core - Fixed User Settings Vault entries being wrongly logged as orphaned when they failed to deserialize
• Core - Fixed users with the legacy User right no longer being able to remove or reset other users, or manage their MFA
• Gateway - Fixed a missing credential rights check when the host picked at launch only switched to a different row of the same password list
• Gateway - Fixed gateway connections failing with "The entry host name is not defined." for entries whose host is set to Linked (vault) > Prompt on connection
• PAM - Fixed heartbeat checks failing for PAM accounts that use a domain alias and belong to the Protected Users group
• PAM - Fixed the UPN username being sent together with the domain when connecting with IronRDP
• PAM - Fixed Windows local account discovery failing on scans that took more than 30 seconds to respond
• Web - Fixed a "TypeError reading ‘id'" error when confirming a privileged account checkout before opening a session
• Web - Fixed a NotFoundException being logged when editing a vault template
• Web - Fixed Microsoft SQL Server entries not being supported in the web interface
• Web - Fixed web client sessions never recording an end time on close, which inflated session durations in Privileged Session Monitoring

** CONSOLE RELEASE NOTES **

IMPROVEMENTS

• Minor update