rustdesk-client vulnerabilities

Newest CVEs

• CVE-2026-30785

  RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

  rustdesk-client · RustDesk Client

  High8.2
• CVE-2026-30783

  RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

  rustdesk-client · RustDesk Client

  Medium4.8
• CVE-2026-30789

  RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force

  rustdesk-client · RustDesk Client

  Medium5.7
• CVE-2026-30798

  RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

  rustdesk-client · RustDesk Client

  High8.2
• CVE-2026-30797

  RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

  rustdesk-client · RustDesk Client

  Critical9.3
• CVE-2026-30796

  RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync

  rustdesk-client · RustDesk Client

  Medium6.9
• CVE-2026-30795

  RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

  rustdesk-client · RustDesk Client

  High8.7
• CVE-2026-30793

  RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

  rustdesk-client · RustDesk Client

  Critical9.3
• CVE-2026-30792

  RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings

  rustdesk-client · RustDesk Client

  High8.3
• CVE-2026-30791

  RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

  rustdesk-client · RustDesk Client

  High8.7