CVE-2025-3768: Medium severity devolutions server vulnerability
Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking feature when the Devolutions hosted endpoint is not reachable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3768?
CVE-2025-3768 has a critical severity rating due to improper access controls that allow authenticated users to bypass the Tor blocking feature.
How do I fix CVE-2025-3768?
To fix CVE-2025-3768, upgrade to Devolutions Server version 2025.1.10.1 or later where the vulnerability is addressed.
What versions of Devolutions Server are affected by CVE-2025-3768?
CVE-2025-3768 affects Devolutions Server versions up to and including 2025.1.10.0.
What is the impact of CVE-2025-3768 on Devolutions Server?
The impact of CVE-2025-3768 allows an authenticated user to bypass the Tor network blocking feature, potentially leading to unauthorized access.
What should I do if I cannot upgrade to patch CVE-2025-3768 immediately?
If you cannot upgrade immediately, consider implementing additional access controls or blocking Tor access at the network level to mitigate risks associated with CVE-2025-3768.