CVE-2022-32450
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link. The user can write to their own %APPDATA% folder (used for ad.trace and chat), but the product runs as SYSTEM when writing chat-room data there.
Risk Assessment
An attacker with local access can gain full system control by executing code in the SYSTEM context, leading to complete machine compromise.
Recommendation
Immediately update AnyDesk to a version newer than 7.0.9 that fixes this vulnerability. Restricting access to the %APPDATA% folder for unprivileged users may reduce risk.
Other vulnerabilities in AnyDesk
See all- CVE-2017-14397Critical
AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.
- CVE-2026-15682Medium
A vulnerability in AnyDesk allows a local attacker to cause a denial-of-service (DoS) condition by abusing the 'Send Support Information' feature. The attack requires prior low-privileged code execution on the target system.
- CVE-2026-15681Medium
A vulnerability in AnyDesk allows a local attacker to cause a denial-of-service (DoS) condition by manipulating screen recording files. The attacker must first obtain the ability to execute low-privileged code on the target system.
- CVE-2016-20094High
AnyDesk version 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with elevated privileges during application startup or system reboot.
Original NVD description (English source)
AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there.