Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.2

RustDesk Client on Windows, MacOS, Linux May Expose Sensitive Data

CVE-2026-30785
Summary

If an attacker can manipulate certain data, they may be able to access sensitive information such as passwords and encryption keys, which could compromise the security of your account. This issue affects the RustDesk Client on Windows, MacOS, and Linux, and you should update to a newer version to fix it. If you're using a version older than 1.4.5, you should update as soon as possible.

Original title
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Clie...
Original description
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().

This issue affects RustDesk Client: through 1.4.5.
nvd CVSS4.0 8.2
Vulnerability type
CWE-257
CWE-323
CWE-916
CWE-1321 Prototype Pollution
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026