CVE-2025-8312

Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in the scheduling service.This issue affects the following version(s) : * Devolutions Server 2025.2.2.0 through 2025.2.5.0 * Devolutions Server 2025.1.12.0 and earlier

Score

CVSS 3.1 7.1 High

Status

Modified - security@devolutions.net

Published

2025-07-30

Last modified

2025-08-19

Weaknesses

CWE-833

Affected products

• Devolutions Server (Devolutions)
• Server (Devolutions)

References

• https://devolutions.net/security/advisories/DEVO-2025-0013/