VYPR

rustdesk-api

by Lejianwen

CVEs (1)

  • CVE-2026-111324MedOct 15, 2026
    risk 0.34cvss 5.3epss —

    rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid…