PT-2026-23449 · Unknown · Rustdesk Server Pro

Erez Kalman · Published 2026-03-05 · Updated 2026-03-05 · CVE-2026-3598

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RustDesk Server Pro versions through 1.7.5

Description A flaw exists in RustDesk Server Pro related to the use of a broken or risky cryptographic algorithm. This issue impacts Windows, MacOS, and Linux systems, specifically within the configuration string generation and web console export modules. The issue allows for the retrieval of embedded sensitive data through program routines related to configuration export and generation.

Recommendations Update RustDesk Server Pro to a version later than 1.7.5.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-684

Related Identifiers

CVE-2026-3598

Affected Products

Rustdesk Server Pro

References · 5

• 🔥 https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3598 · Security Note
• https://rustdesk.com/docs/en/client · Note
• https://vulsec.org · Note
• https://t.me/CVEtracker/46451 · Telegram Post