Is CVE-2026-30789 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-30789 being exploited in the wild.

How severe is CVE-2026-30789?

Critical severity, with a CVSS score of 9.8, published 5 March 2026.

Is there a fix for CVE-2026-30789?

A patch was published on 2026-06-21: Version 1.4.8 released (addressing related vulnerabilities) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-30789 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-30789?

Check whether you run Apple Iphone Os, Apple macOS, Google Android or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-30789: RustDesk Client authentication bypass via session replay and weak hashing

CVE-2026-30789 · Severity: critical · CVSS 9.8 · Published 2026-03-05

RustDesk is a remote desktop application used to access and control computers over a network. A security flaw in the client software allows attackers to bypass authentication by capturing and replaying login sessions or by cracking weak password hashes. This could allow an unauthorized person to gain full remote control over a user's device, potentially leading to data theft or system compromise.

Technologies: Apple Iphone Os, Apple macOS, Google Android, Linux Kernel, Microsoft Windows, Rustdesk, RustDesk Client. Vendors: Apple, Google, Linux, Microsoft, Rustdesk.

Quick answers

Is CVE-2026-30789 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-30789 being exploited in the wild.
How severe is CVE-2026-30789?: Critical severity, with a CVSS score of 9.8, published 5 March 2026.
Which products and versions are affected?: RustDesk Client through 1.4.5.
Is there a fix for CVE-2026-30789?: A patch was published on 2026-06-21: Version 1.4.8 released (addressing related vulnerabilities) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-30789 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-30789?: Check whether you run Apple Iphone Os, Apple macOS, Google Android or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An authentication bypass vulnerability exists in RustDesk Client through version 1.4.5 due to improper session management and weak cryptographic practices. The software is susceptible to capture-replay attacks where an attacker can reuse intercepted Session IDs to gain unauthorized access. Additionally, the 'hash_password()' routine and login proof construction in 'src/client.rs' utilize password hashing with insufficient computational effort (CWE-916), making them vulnerable to offline brute-force attacks. These flaws allow a network-based attacker to bypass peer authentication and gain remote control of the affected system without valid credentials. Version 1.4.8 appears to address several related security issues, though users are advised to update to the latest available release.

Affected products

RustDesk RustDesk Client through 1.4.5

Timeline

2026-03-05: disclosed: Initial disclosure by VULSec Labs
2026-03-05: advisory: CVE-2026-30789 published
2026-06-21: patched: Version 1.4.8 released (addressing related vulnerabilities)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.