PatchTheCVErustdesk vulnerabilities
Recent CVEs affecting rustdesk products. 11 tracked.
rustdesk has 11 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-03-05. Highest priority: CVE-2026-30783 (score 58/100).
- CVE-2026-30796 HIGH 7.5 UPGRADE Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdes
- CVE-2026-30792 HIGH 8.1 UPGRADE A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web
- CVE-2026-30789 CRITICAL 9.8 UPGRADE Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication
- CVE-2026-30783 CRITICAL 9.8 UPGRADE A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web
- CVE-2026-30798 HIGH 7.5 UPGRADE Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in r
- CVE-2026-3598 HIGH 7.5 UPGRADE Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rust
- CVE-2026-30797 HIGH 8.1 UPGRADE Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linu
- CVE-2026-30795 HIGH 7.5 UPGRADE Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-clie
- CVE-2026-30793 CRITICAL 9.8 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows,
- CVE-2026-30791 HIGH 7.5 UPGRADE Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-cli
- CVE-2026-30785 MEDIUM 5.5 UPGRADE Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Has
FAQ
How do I fix rustdesk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rustdesk being exploited right now?
None of the tracked rustdesk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rustdesk CVE should I patch first?
CVE-2026-30783 currently ranks highest (58/100): A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, Web.