PT-2026-23464 · Unknown · Rustdesk Client

Erez Kalman · Published 2026-03-05 · Updated 2026-03-05 · CVE-2026-30783

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5

Description A flaw exists in RustDesk Client on Windows, MacOS, Linux, iOS, Android, and WebClient, specifically within the client signaling, API sync loop, and config management modules. This issue allows for privilege abuse and is related to files located in src/rendezvous mediator.Rs and src/hbbs http/sync.Rs, as well as the API sync loop and api-server config handling routines.

Recommendations Update RustDesk Client to a version later than 1.4.5.

Exploit

Fix

Weakness Enumeration

CWE-841

CWE-602

Related Identifiers

CVE-2026-30783

Affected Products

Rustdesk Client

References · 6

• 🔥 https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30783 · Security Note
• https://vulsec.org · Note
• https://twitter.com/CVEnew/status/2029654729106546931 · Twitter Post
• https://rustdesk.com/docs/en/client · Note
• https://twitter.com/VulmonFeeds/status/2029630725645852725 · Twitter Post