CVE-2026-30792
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability in the RustDesk Client allows Application API Message Manipulation via Man-in-the-Middle. This affects various platforms including Windows, MacOS, Linux, iOS, Android, and WebClient.
Risk Assessment
An attacker could intercept and modify communication between the client and server, potentially leading to unauthorized access to application data or functions.
Recommendation
It is recommended to update the RustDesk Client to version 1.4.9 or later to mitigate this vulnerability.
Other vulnerabilities in RustDesk Client
See all- CVE-2026-30789Critical
A vulnerability in the RustDesk client allows for password brute forcing due to insufficient computational effort in hashing and improper restriction of excessive authentication attempts. The authentication mechanism based on SHA256 does not use a slow key-derivation function, enabling attackers to recover passwords offline.
- CVE-2026-30796High
A vulnerability in the RustDesk client transmits the address book password in cleartext within the heartbeat sync JSON body. Although HTTPS encrypts the transmission, the password is a shared secret that can be recovered by an attacker who compromises the API server.
Original NVD description (English source)
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files src/hbbs_http/sync.Rs, hbb_common/src/config.Rs and program routines Strategy merge loop in sync.Rs, Config::set_options(). This issue affects RustDesk Client: through 1.4.8.