CVE-2026-58056
HIGHRustDesk - FileTransfer Session Authorization Scope Bypass
Title source: cnaDescription
RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject keyboard and mouse input and reach the unguarded screenshot and display-capture handlers, acting outside its granted scope.
References (2)
Core 2
Core References
Exploit exploit
third-party-advisory
Proof of Concept
https://github.com/bikini/exploitarium/tree/main/rustdesk-session-permission-pocs
Third Party Advisory third-party-advisory
VulnCheck Advisory: RustDesk - FileTransfer Session Authorization Scope Bypass
https://www.vulncheck.com/advisories/rustdesk-filetransfer-session-authorization-scope-bypass
Scores
CVSS v3
7.6
EPSS
0.0019
EPSS Percentile
9.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-863
Status
published
Products (3)
RustDesk/RustDesk
< 1.4.8
RustDesk/RustDesk
< ff226f6d8013dee2de5a6553abaf67bf32b3e875
RustDesk/RustDesk
1.4.9
Published
Jun 28, 2026
Tracked Since
Jun 28, 2026