rustdesk-client

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

rustdesk-client records in CISA KEV

No rustdesk-client vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rustdesk 10 records HIGH Rustdesk Server 2 records HIGH

Records

10 records in Rustdesk · all components

TI-2024-16591 CVE-2024-25140 · GHSA-xc8c-3cmg-p9qr

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate…

HIGH 82

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing (1.3.6.1.5.5.7.3.3), valid from 2023 until 2033.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00509 Published 2024-02-06 No fix listed CWE-295

TI-2026-23626 CVE-2026-30795 · GHSA-c9v6-fhff-767p

RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

HIGH 77

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing Attacks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00314 Published 2026-03-05 No fix listed CWE-319

TI-2026-23624 CVE-2026-30792 · GHSA-39g5-2q66-34fm

RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings

HIGH 77

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipula…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00304 Published 2026-03-05 No fix listed CWE-345

TI-2026-23621 CVE-2026-30785 · GHSA-v738-924g-mm67

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

HIGH 77

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common…

CVSS 4.0HIGH 8.2 Local Low privileges No interaction EPSS 0.00095 Published 2026-03-05 No fix listed CWE-1321

TI-2026-23629 CVE-2026-30798 · GHSA-w793-gh7r-h7mx

RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

HIGH 75

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop, st…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00337 Published 2026-03-05 No fix listed CWE-345

TI-2026-23628 CVE-2026-30797 · GHSA-9h94-q24v-4v27

RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

HIGH 75

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application API Message Manipulatio…

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00522 Published 2026-03-05 No fix listed CWE-749

TI-2026-23625 CVE-2026-30793 · GHSA-83v8-c68x-gcpr

RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

HIGH 75

Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privilege Escalation.

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00348 Published 2026-03-05 No fix listed CWE-285

TI-2026-23622 CVE-2026-30789 · GHSA-9qf7-q6gx-q652

RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force

HIGH 67

Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Andro…

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00315 Published 2026-03-05 No fix listed CWE-916

TI-2026-23620 CVE-2026-30783 · GHSA-f8r5-ghjf-q2pv

RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

MEDIUM 57

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00432 Published 2026-03-05 No fix listed CWE-602

TI-2026-23623 CVE-2026-30791 · GHSA-mpxj-6c39-w4rr

RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

MEDIUM 43

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, URI scheme handler, CLI --config modules…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00273 Published 2026-03-05 No fix listed CWE-327

Open these records in search →

Critical	3
High	10
Medium	6
Low	1
No CVSS	0