Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-30791

RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VULSec

Description

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, URI scheme handler, CLI --config modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files flutter/lib/common.Dart, hbb_common/src/config.Rs and program routines parseRustdeskUri(), importConfig(). This issue affects RustDesk Client: through 1.4.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

rustdesk-client RustDesk Client

Default version status: affected

  • 0 to ≤ 1.4.5affected

References