Rustdesk-client vulnerabilities

Products

• Rustdesk Client 10

Newest

• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) CVE-2026-30785 8.2 HighMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies CVE-2026-30783 4.8 MediumMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force CVE-2026-30789 5.7 MediumMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload CVE-2026-30798 8.2 HighMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server CVE-2026-30797 9.3 CriticalMarch 5, 2026
• rustdesk server, rustdesk-client rustdesk client +1 more RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync CVE-2026-30796 6.9 MediumMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure CVE-2026-30795 8.7 HighMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation CVE-2026-30793 9.3 CriticalMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings CVE-2026-30792 8.3 HighMarch 5, 2026
• rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation CVE-2026-30791 8.7 HighMarch 5, 2026