← Back

CVE-2026-30783

nvd nist
Published: Mar 5, 2026Modified: Jun 22, 2026

JSON object

Loading...
4.8
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe (Secondary)

Description

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_mediator.Rs, src/hbbs_http/sync.Rs and program routines API sync loop, api-server config handling. This issue affects RustDesk Client: through 1.4.8.

Affected (1)

Products: Rustdesk: Rustdesk
Rustdesk
1 product
Rustdesk
Configuration A
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Rustdesk
Up to 1.4.5
Running on/withPlatform Versions
Apple
Iphone Os
All versions
Apple
Macos
All versions
Google
Android
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
CWE-841
Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

References (3)

Source: 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
ExploitThird Party Advisory
Source: 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
Product
Source: 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe
Third Party Advisory

Timeline

No history available yet.