rustdesk vulnerabilities and fixes
Recent CVEs affecting rustdesk, with upgrade or downgrade steps. 9 tracked.
rustdesk has 9 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-03-05. Highest priority: CVE-2026-30783 (score 58/100).
- CVE-2026-30792 HIGH 8.1 UPGRADE A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web
- CVE-2026-30789 CRITICAL 9.8 UPGRADE Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication
- CVE-2026-30783 CRITICAL 9.8 UPGRADE A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web
- CVE-2026-30798 HIGH 7.5 UPGRADE Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in r
- CVE-2026-30797 HIGH 8.1 UPGRADE Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linu
- CVE-2026-30795 HIGH 7.5 UPGRADE Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-clie
- CVE-2026-30793 CRITICAL 9.8 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows,
- CVE-2026-30791 HIGH 7.5 UPGRADE Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-cli
- CVE-2026-30785 MEDIUM 5.5 UPGRADE Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Has
FAQ
How do I fix rustdesk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rustdesk being exploited right now?
None of the tracked rustdesk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rustdesk CVE should I patch first?
CVE-2026-30783 currently ranks highest (58/100): A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web.