Skip to content
OpenAdvisories

Vendor

rustdesk

8 known vulnerabilities.

Products

rustdesk 7 Client for Windows 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-57850 Public exploit

    RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection

    RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type (FileTransfer, PortForward, ViewCamera, or Terminal) can send control messages and login options reserved for a full Re…

    rustdesk rustdesk