Skip to content
OpenAdvisories

Vendor

rustdesk

8 known vulnerabilities.

Products

rustdesk 7 Client for Windows 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-73108

    RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec

    RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the pa…

    rustdesk rustdesk
  • High 8.3
    CVE-2026-57850 Public exploit

    RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection

    RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type (FileTransfer, PortForward, ViewCamera, or Terminal) can send control messages and login options reserved for a full Re…

    rustdesk rustdesk
  • High 7.6
    CVE-2026-58056

    RustDesk - FileTransfer Session Authorization Scope Bypass

    RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject keyboard and mo…

    rustdesk rustdesk