Devolutions Server Version 2026.3.11.0 (October 21, 2026)

Devolutions Server Version 2026.3.11.0 (October 21, 2026)

avatar
Devolutions

If you are using a client (RDM, PowerShell, etc.), version 2026.3 is required for this DVLS version

IMPROVEMENTS

  • Core - Added a forced password change at first sign-in for the default dvls-admin account in the Docker image, so no hardcoded default password stays in use

  • Core - Blocked uploads that would lose data from Spreadsheet documents saved by affected RDM versions. DVLS now keeps the previous full workbook and logs a warning

  • Web - Added the ability to manage "My personal credentials" and "My privileged account" from the web interface

FIXES

  • SECURITY Core - Fixed an issue where applying a vault template could bypass entry security

  • SECURITY Core - Fixed MFA secrets being exposed in the user list response

  • SECURITY Core - Fixed missing authorization checks that let users create and edit account discovery scans on providers they could not manage

  • SECURITY Gateway - Fixed an issue where Devolutions Gateway token destinations could bypass virtual gateway Network Access Rules

  • SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM accounts and overwrite PAM providers

  • SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM AD computers and create PAM sub-providers

  • Core - Fixed approval emails not reaching user group members when a temporary access request was sent to a user group

  • Core - Fixed RDM PowerShell cmdlets failing with "Unexpected exception" when loading a DVLS workspace without permission to view user groups

  • Core - Fixed Set-DSEntityPermission resetting View and replacing existing rights when the OverrideExistingPermissions switch was not used

  • Core - Fixed User Settings Vault entries being wrongly logged as orphaned when they failed to deserialize

  • Core - Fixed users with the legacy User right no longer being able to remove or reset other users, or manage their MFA

  • Gateway - Fixed a missing credential rights check when the host picked at launch only switched to a different row of the same password list

  • Gateway - Fixed gateway connections failing with "The entry host name is not defined." for entries whose host is set to Linked (vault) > Prompt on connection

  • PAM - Fixed heartbeat checks failing for PAM accounts that use a domain alias and belong to the Protected Users group

  • PAM - Fixed the UPN username being sent together with the domain when connecting with IronRDP

  • PAM - Fixed Windows local account discovery failing on scans that took more than 30 seconds to respond

  • Web - Fixed a "TypeError reading ‘id'" error when confirming a privileged account checkout before opening a session

  • Web - Fixed a NotFoundException being logged when editing a vault template

  • Web - Fixed Microsoft SQL Server entries not being supported in the web interface

  • Web - Fixed web client sessions never recording an end time on close, which inflated session durations in Privileged Session Monitoring

** CONSOLE RELEASE NOTES **

IMPROVEMENTS

  • Minor update

All Comments (0)