PT-2026-5798 · Anydesk · Anydesk

Sajjadbnd · Published 2026-02-03 · Updated 2026-02-25 · CVE-2019-25261

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AnyDesk version 5.4.0

Description AnyDesk 5.4.0 has an issue with an unquoted service path in its Windows service configuration. This could allow local attackers to inject malicious executables. Exploiting the unquoted binary path enables attackers to place malicious files in service executable locations, potentially leading to elevated system privileges.

Recommendations Update to a newer version of AnyDesk that addresses the unquoted service path issue.

Exploit

Fix

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25261

Affected Products

Anydesk

References · 6

• 🔥 https://exploit-db.com/exploits/47883 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25261 · Security Note
• https://vulncheck.com/advisories/anydesk-unquoted-service-path · Note
• http://anydesk.com · Note
• https://t.me/cveNotify/153219 · Telegram Post