CVE-2026-30785

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-30785", "assignerOrgId": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "state": "PUBLISHED", "assignerShortName": "VULSec", "dateReserved": "2026-03-05T14:13:35.407Z", "datePublished": "2026-03-05T16:04:36.443Z", "dateUpdated": "2026-03-06T10:32:38.348Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/rustdesk/rustdesk/releases", "defaultStatus": "affected", "modules": ["Password security module", "config encryption", "machine UID"], "packageName": "rustdesk, hbb_common", "platforms": ["Windows", "MacOS", "Linux"], "product": "RustDesk Client", "programFiles": ["hbb_common/src/password_security.rs", "hbb_common/src/config.rs", "hbb_common/src/lib.rs (get_uuid)", "machine-uid/src/lib.rs"], "programRoutines": [{"name": "symmetric_crypt()"}, {"name": "encrypt_str_or_original()"}, {"name": "decrypt_str_or_original()"}, {"name": "get_uuid()"}, {"name": "get_machine_id()"}], "repo": "https://github.com/rustdesk/hbb_common,https://github.com/rustdesk-org/machine-uid", "vendor": "rustdesk-client", "versions": [{"lessThanOrEqual": "1.4.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Default \u2014 any desktop installation with permanent password or saved peers"}], "value": "Default \u2014 any desktop installation with permanent password or saved peers"}], "credits": [{"lang": "en", "type": "finder", "value": "Erez Kalman"}, {"lang": "en", "type": "reporter", "value": "Erez Kalman"}], "datePublic": "2026-03-05T13:45:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data.<p> This vulnerability is associated with program files <tt>hbb_common/src/password_security.Rs</tt>, <tt>hbb_common/src/config.Rs</tt>, <tt>hbb_common/src/lib.Rs (get_uuid)</tt>, <tt>machine-uid/src/lib.Rs</tt> and program routines <tt>symmetric_crypt()</tt>, <tt>encrypt_str_or_original()</tt>, <tt>decrypt_str_or_original()</tt>, <tt>get_uuid()</tt>, <tt>get_machine_id()</tt>.</p><p>This issue affects RustDesk Client: through 1.4.5.</p>"}], "value": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nThis issue affects RustDesk Client: through 1.4.5."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "PoC available. Trivially exploitable.<br>"}], "value": "PoC available. Trivially exploitable."}], "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 8.2, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-257", "description": "CWE-257", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-1321", "description": "CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-323", "description": "CWE-323", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-916", "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "shortName": "VULSec", "dateUpdated": "2026-03-05T17:05:28.602Z"}, "references": [{"tags": ["technical-description", "x_--config documentation"], "url": "https://github.com/rustdesk/rustdesk/discussions/9229"}, {"tags": ["technical-description", "x_--config documentation"], "url": "https://github.com/rustdesk/rustdesk/discussions/4979"}, {"tags": ["third-party-advisory", "exploit"], "url": "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub"}, {"tags": ["vdb-entry", "third-party-advisory"], "url": "https://www.vulsec.org/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Use one-way hashing (Argon2id) for passwords. Use OS-native credential stores (DPAPI, Keychain, libsecret) for recoverable secrets. Apply proper KDF. Use random nonces."}], "value": "Use one-way hashing (Argon2id) for passwords. Use OS-native credential stores (DPAPI, Keychain, libsecret) for recoverable secrets. Apply proper KDF. Use random nonces."}], "source": {"discovery": "UNKNOWN"}, "title": "RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Set restrictive file permissions on TOML config files. Avoid saving peer passwords."}], "value": "Set restrictive file permissions on TOML config files. Avoid saving peer passwords."}], "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T10:32:18.593322Z", "id": "CVE-2026-30785", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T10:32:38.348Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-30785", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-06T10:32:18.593322Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T10:32:34.241Z"}}], "cna": {"title": "RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Erez Kalman"}, {"lang": "en", "type": "reporter", "value": "Erez Kalman"}], "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.2, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/rustdesk/hbb_common,https://github.com/rustdesk-org/machine-uid", "vendor": "rustdesk-client", "modules": ["Password security module", "config encryption", "machine UID"], "product": "RustDesk Client", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.4.5"}], "platforms": ["Windows", "MacOS", "Linux"], "packageName": "rustdesk, hbb_common", "programFiles": ["hbb_common/src/password_security.rs", "hbb_common/src/config.rs", "hbb_common/src/lib.rs (get_uuid)", "machine-uid/src/lib.rs"], "collectionURL": "https://github.com/rustdesk/rustdesk/releases", "defaultStatus": "affected", "programRoutines": [{"name": "symmetric_crypt()"}, {"name": "encrypt_str_or_original()"}, {"name": "decrypt_str_or_original()"}, {"name": "get_uuid()"}, {"name": "get_machine_id()"}]}], "exploits": [{"lang": "en", "value": "PoC available. Trivially exploitable.", "supportingMedia": [{"type": "text/html", "value": "PoC available. Trivially exploitable.<br>", "base64": false}]}], "solutions": [{"lang": "en", "value": "Use one-way hashing (Argon2id) for passwords. Use OS-native credential stores (DPAPI, Keychain, libsecret) for recoverable secrets. Apply proper KDF. Use random nonces.", "supportingMedia": [{"type": "text/html", "value": "Use one-way hashing (Argon2id) for passwords. Use OS-native credential stores (DPAPI, Keychain, libsecret) for recoverable secrets. Apply proper KDF. Use random nonces.", "base64": false}]}], "datePublic": "2026-03-05T13:45:00.000Z", "references": [{"url": "https://github.com/rustdesk/rustdesk/discussions/9229", "tags": ["technical-description", "x_--config documentation"]}, {"url": "https://github.com/rustdesk/rustdesk/discussions/4979", "tags": ["technical-description", "x_--config documentation"]}, {"url": "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub", "tags": ["third-party-advisory", "exploit"]}, {"url": "https://www.vulsec.org/", "tags": ["vdb-entry", "third-party-advisory"]}], "workarounds": [{"lang": "en", "value": "Set restrictive file permissions on TOML config files. Avoid saving peer passwords.", "supportingMedia": [{"type": "text/html", "value": "Set restrictive file permissions on TOML config files. Avoid saving peer passwords.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nThis issue affects RustDesk Client: through 1.4.5.", "supportingMedia": [{"type": "text/html", "value": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data.<p> This vulnerability is associated with program files <tt>hbb_common/src/password_security.Rs</tt>, <tt>hbb_common/src/config.Rs</tt>, <tt>hbb_common/src/lib.Rs (get_uuid)</tt>, <tt>machine-uid/src/lib.Rs</tt> and program routines <tt>symmetric_crypt()</tt>, <tt>encrypt_str_or_original()</tt>, <tt>decrypt_str_or_original()</tt>, <tt>get_uuid()</tt>, <tt>get_machine_id()</tt>.</p><p>This issue affects RustDesk Client: through 1.4.5.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-257", "description": "CWE-257"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-323", "description": "CWE-323"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-916", "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort"}]}], "configurations": [{"lang": "en", "value": "Default \u2014 any desktop installation with permanent password or saved peers", "supportingMedia": [{"type": "text/html", "value": "Default \u2014 any desktop installation with permanent password or saved peers", "base64": false}]}], "providerMetadata": {"orgId": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "shortName": "VULSec", "dateUpdated": "2026-03-05T17:05:28.602Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30785", "state": "PUBLISHED", "dateUpdated": "2026-03-06T10:32:38.348Z", "dateReserved": "2026-03-05T14:13:35.407Z", "assignerOrgId": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "datePublished": "2026-03-05T16:04:36.443Z", "assignerShortName": "VULSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/rustdesk/rustdesk/releases", "defaultStatus": "affected", "modules": ["Password security module", "config encryption", "machine UID"], "packageName": "rustdesk, hbb_common", "platforms": ["Windows", "MacOS", "Linux"], "product": "RustDesk Client", "programFiles": ["hbb_common/src/password_security.rs", "hbb_common/src/config.rs", "hbb_common/src/lib.rs (get_uuid)", "machine-uid/src/lib.rs"], "programRoutines": [{"name": "symmetric_crypt()"}, {"name": "encrypt_str_or_original()"}, {"name": "decrypt_str_or_original()"}, {"name": "get_uuid()"}, {"name": "get_machine_id()"}], "repo": "https://github.com/rustdesk/hbb_common,https://github.com/rustdesk-org/machine-uid", "vendor": "rustdesk-client", "versions": [{"lessThanOrEqual": "1.4.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:-:*:*:*", "matchCriteriaId": "70EE9711-C12B-402D-B28E-4CF19EC7BC88", "versionEndIncluding": "1.4.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nThis issue affects RustDesk Client: through 1.4.5."}, {"lang": "es", "value": "Modificaci\u00f3n Inadecuadamente Controlada de Atributos de Prototipo de Objeto ('Contaminaci\u00f3n de Prototipos'), vulnerabilidad de Uso de Hash de Contrase\u00f1a Con Esfuerzo Computacional Insuficiente en rustdesk-client RustDesk Cliente rustdesk, hbb_common en Windows, MacOS, Linux (M\u00f3dulo de seguridad de contrase\u00f1a, cifrado de configuraci\u00f3n, m\u00f3dulos de UID de m\u00e1quina) permite Recuperar Datos Sensibles Incrustados. Esta vulnerabilidad est\u00e1 asociada con los archivos de programa hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs y las rutinas de programa symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nEste problema afecta a RustDesk Cliente: hasta la 1.4.5."}], "id": "CVE-2026-30785", "lastModified": "2026-06-17T10:32:55.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30785", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T10:32:18.593322Z", "version": "2.0.3"}}]}, "published": "2026-03-05T16:16:19.270", "references": [{"source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "tags": ["Exploit", "Third Party Advisory"], "url": "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub"}, {"source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "tags": ["Issue Tracking"], "url": "https://github.com/rustdesk/rustdesk/discussions/4979"}, {"source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "tags": ["Issue Tracking"], "url": "https://github.com/rustdesk/rustdesk/discussions/9229"}, {"source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "tags": ["Not Applicable"], "url": "https://www.vulsec.org/"}], "sourceIdentifier": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-257"}, {"lang": "en", "value": "CWE-323"}, {"lang": "en", "value": "CWE-916"}, {"lang": "en", "value": "CWE-1321"}], "source": "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "macos", "linux"], "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.4.5]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "RustDesk Client", "source": "cna", "vendor": "rustdesk-client"}, "product": "rustdesk_client", "vendor": "rustdesk-client"}], "analysis": {"en": {"generated_at": "2026-04-16T12:19:32.203792+00:00", "value": {"mitigation_remediation": ["Upgrade to a RustDesk Client release that implements Argon2id hashing, uses OS\u2011native credential stores, applies a proper key derivation function, and generates random nonces for encryption.", "Set restrictive file permissions on the TOML configuration files to prevent non\u2011authorized read access.", "Avoid storing peer passwords in the client\u2019s configuration when possible or remove them entirely if they are retained.", "If an upgrade is not immediately possible, monitor for official patches and prepare to apply them as soon as they become available."], "summary": {"action": "Patch", "impact": "Sensitive Data Exposure"}, "threat_synthesis": {"affected_systems": "RustDesk Client versions up to and including 1.4.5 on Windows, macOS, and Linux are affected. The issue is present in the password security module, config encryption module, and machine UID generation code of the RustDesk Client.", "description_and_impact": "The vulnerability in RustDesk Client arises from improper handling of password security, including the use of a weak password hash with insufficient computational effort, a fixed zero nonce, and a world\u2011readable machine ID. These weaknesses enable prototype pollution through the hbb_common library and allow an attacker to read encrypted configuration files, ultimately retrieving embedded local passwords or other sensitive data. The flaw leverages CWE\u20111321, CWE\u2011257, CWE\u2011323, and CWE\u2011916 weaknesses in the encryption and key derivation process. The consequence is a compromise of user confidentiality, potentially exposing credentials used to authenticate to remote peers or other services. No information is given about denial of service or integrity tampering, only the confidentiality impact.", "risk_and_exploitability": "The CVSS score of 8.2 indicates a high severity, while the EPSS score of <1% suggests a low likelihood of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. The attack vector is most likely local, requiring access to the client\u2019s configuration files, though an attacker who can place a crafted prototype pollution payload could potentially exploit the weakness remotely if the client parses untrusted data. Because the compromised data include passwords stored in plain\u2011text form within the configuration, an attacker with sufficient access can mount credential\u2011stuffing or further attacks against other systems. Given the severity, organizations running affected versions should prioritize remediation."}}}}, "created": "2026-03-06T15:01:41.059292+00:00", "updated": "2026-04-16T12:30:06.111978+00:00", "vendors": ["rustdesk-client", "rustdesk-client$PRODUCT$rustdesk_client"]}