Rustdesk · Rustdesk Client For Windows · CVE-2026-2490
**Name of the Vulnerable Software and Affected Versions**
RustDesk Client for Windows (affected versions not specified)
**Description**
A security issue exists in RustDesk Client for Windows related to the Transfer File feature. A local attacker with low-privileged code execution capabilities can disclose sensitive information. This is achieved by uploading a symbolic link, which allows the service to read arbitrary files, potentially in the context of SYSTEM.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.