CVE-2026-30792
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files src/hbbs_http/sync.Rs, hbb_common/src/config.Rs and program routines Strategy merge loop in sync.Rs, Config::set_options(). This issue affects RustDesk Client: through 1.4.5.
Scoring
- Severity
- HIGH
- CVSS base score
- 9.1
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
- EPSS probability
- 0.27%
- CWE
- CWE-657, CWE-657, CWE-345
- Published
- 2026-03-05
- Last modified
- 2026-06-22
Affected products
- rustdesk-client RustDesk Client
Weakness type
Related vulnerabilities
- CVE-2026-48399 — Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
- CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
- CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)
- CVE-2025-24887 — OpenCTI bypass of protected attribute update
- CVE-2024-57957 — Vulnerability of improper log information control in the UI framework module...
- CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
- CVE-2023-29320 — ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw
- CVE-2022-30683 — AEM Violation of Secure Design Principles Security feature bypass