PT-2026-23464 · Unknown · Rustdesk Client

Erez Kalman · CVE-2026-30783 · Published 2026-03-05 · Updated 2026-06-22

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5

Description A flaw exists in RustDesk Client on Windows, MacOS, Linux, iOS, Android, and WebClient, specifically within the client signaling, API sync loop, and config management modules. This issue allows for privilege abuse and is related to files located in src/rendezvous mediator.Rs and src/hbbs http/sync.Rs, as well as the API sync loop and api-server config handling routines.

Recommendations Update RustDesk Client to a version later than 1.4.5.

Exploit

Fix

Weakness Enumeration

CWE-602

CWE-841

Related Identifiers

CVE-2026-30783

Affected Products

Rustdesk Client

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30783.json · Exploit
• 🔥 https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30783 · Security Note
• https://osv.dev/vulnerability/CVE-2026-30783 · Vendor Advisory
• https://github.com/rustdesk/rustdesk/releases · Note
• https://github.com/rustdesk/rustdesk,https://github.com/rustdesk/hbb_common · Note
• https://t.me/cveNotify/171472 · Telegram Post
• https://twitter.com/CVEnew/status/2029654729106546931 · Twitter Post
• https://vulsec.org · Note
• https://t.me/cveNotify/171421 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029630725645852725 · Twitter Post
• https://rustdesk.com/docs/en/client · Note