Vulnerability Description
Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host using stored elevation credentials via a crafted alternate username and user interaction with the Elevate Shell action. This affects : - Remote Desktop Manager 2026.2.5.0 through 2026.2.7.0 - Remote Desktop Manager 2026.1.23.0 and earlier
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | < 2026.2.8.0 |
Related Weaknesses (CWE)
References
- https://devolutions.net/security/advisories/DEVO-2026-0018/Vendor Advisory
FAQ
What is CVE-2026-12161?
CVE-2026-12161 is a vulnerability with a CVSS score of 8.8 (HIGH). Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host usin...
How severe is CVE-2026-12161?
CVE-2026-12161 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-12161?
Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Remote Desktop Manager.