What is GHSA-jhmq-jch2-cv3p?

GHSA-jhmq-jch2-cv3p is a security advisory published by GitHub Security Advisories with Medium severity. Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions...

Which CVE IDs does GHSA-jhmq-jch2-cv3p cover?

GHSA-jhmq-jch2-cv3p covers the following CVE IDs: CVE-2026-110804. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jhmq-jch2-cv3p?

GHSA-jhmq-jch2-cv3p has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-jhmq-jch2-cv3pMediumCVSS 4.3

Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions...

Vendor

GitHub Security Advisories

Published

October 16, 2026

Last Modified

October 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-110804 →

📋 Description

Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110804
https://devolutions.net/security/advisories/DEVO-2026-0036
https://github.com/advisories/GHSA-jhmq-jch2-cv3p