CVE-2026-30793: CSRF in RustDesk Client Allows Privilege Escalation

The CSRF vulnerability in RustDesk Client allows an attacker to trick a legitimate user into unknowingly executing malicious actions within the application. Specifically, an attacker could leverage this flaw to modify the user's permanent password via the rustdesk://password/ URI handler, effectively gaining unauthorized access to the user's RustDesk session. The attack surface spans multiple platforms including Windows, MacOS, Linux, iOS, and Android, increasing the potential blast radius. Successful exploitation could lead to data breaches, unauthorized remote access, and potential compromise of systems connected to the RustDesk service. While no direct precedent exists for this specific vulnerability, CSRF vulnerabilities generally pose a significant risk due to their ease of exploitation and potential for widespread impact.

1. Reserved2026-03-05
2. Published2026-03-05
3. Modified2026-03-17
4. EPSS updated2026-03-23

The primary mitigation for CVE-2026-30793 is to upgrade to a patched version of RustDesk Client. The vendor has not released a specific fixed version as of this writing, but monitor their official channels for updates. As a temporary workaround, consider implementing strict Content Security Policy (CSP) headers to restrict the origins from which RustDesk Client can load resources. Additionally, educate users about the risks of clicking on suspicious links and entering credentials on untrusted websites. After upgrading, verify the fix by attempting to trigger the password modification URI handler from a different origin and confirming that the request is blocked.