{"id":49152,"date":"2025-06-05T18:29:19","date_gmt":"2025-06-05T18:29:19","guid":{"rendered":""},"modified":"2025-09-04T06:12:29","modified_gmt":"2025-09-04T12:12:29","slug":"cve-2025-4433-improper-access-control-leads-to-privilege-escalation-in-devolutions-server","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4433-improper-access-control-leads-to-privilege-escalation-in-devolutions-server\/","title":{"rendered":"CVE-2025-4433: Improper Access Control Leads to Privilege Escalation in Devolutions Server<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The Common Vulnerabilities and Exposures (CVE) system has identified a significant security flaw in Devolutions Server versions 2025.1.7.0 and earlier. This vulnerability, tagged as CVE-2025-4433, is a glaring example of improper access control within user group management, allowing potential privilege escalation by non-admin users. This flaw is particularly concerning as it affects a broad range of systems and can lead<\/a> to serious consequences like system compromise or data leakage if exploited.
\nThe criticality of this vulnerability<\/a> is underscored by its CVSS Severity Score of 8.8, indicating a high level of risk. Organizations running affected versions of Devolutions Server must prioritize addressing this issue to prevent potential<\/a> security breaches.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4433
\nSeverity: High (8.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: System compromise or data leakage<\/a><\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n