CVE Intelligence

Lejianwen Rustdesk-api vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Lejianwen Rustdesk-api: 1 record(s), with affected versions and fixes.

CVE-2026-111324 Medium · 5.3 CWE-639 Oct 15, 2026
rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in presenting that uuid to rebind the peer to their account.