CVE-2025-8353 – Devolutions Server JIT Group Access Bypass Vulnerability

CVE ID : CVE-2025-8353

Published : July 30, 2025, 4:15 p.m. | 1 hour, 14 minutes ago

Description : UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…