Devolutions Server Version 2026.2.21.0 (October 21, 2026)

If you are using a client (RDM, PowerShell, etc.), version 2026.2 is required for this DVLS version

FIXES

• SECURITY Core - Fixed MFA secrets being exposed in the user list response
• SECURITY Core - Fixed missing authorization checks that let users create and edit account discovery scans on providers they could not manage
• SECURITY Gateway - Fixed an issue where Devolutions Gateway token destinations could bypass virtual gateway Network Access Rules
• SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM accounts and overwrite PAM providers
• SECURITY PAM - Fixed missing authorization checks that let non-administrative users import PAM AD computers and create PAM sub-providers

** CONSOLE RELEASE NOTES **

IMPROVEMENTS

• Minor update