CVE-2026-58056
RustDesk - FileTransfer Session Authorization Scope Bypass
Vexday Risk Score
41Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 7.2EPSS 0.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
28 Jun 2026Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject keyboard and mouse input and reach the unguarded screenshot and display-capture handlers, acting outside its granted scope.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
RustDesk · RustDeskpublic PoCs found — 1
cve_referencegithub.com/bikini/exploitarium/tree/main/rustdesk-session-permission-pocsunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →