PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-30783 rustdesk-client CVE debrief

CVE-2026-30783 is a Privilege Abuse vulnerability affecting RustDesk Client versions up to 1.4.8 across Windows, MacOS, Linux, iOS, Android, and WebClient. The issue lies in modules such as Client signaling, API sync loop, and config management, specifically in program files src/rendezvous_mediator.Rs and src/hbbs_http/sync.Rs. With a CVSS score of 4.8, this medium-severity vulnerability requires local access and low privileges to exploit. Defenders should assess their exposure, prioritize patching, and limit potential abuse.

Vendor
rustdesk-client
Product
Unknown
CVSS
MEDIUM 4.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-05
Original CVE updated
2026-06-22
Advisory published
2026-03-05
Advisory updated
2026-06-22

Who should care

Organizations using RustDesk Client version 1.4.8 or earlier on Windows, MacOS, Linux, iOS, Android, or WebClient should prioritize patching. IT and security teams responsible for managing these platforms must assess their exposure and take immediate action to limit potential privilege abuse.

Technical summary

The vulnerability, CVE-2026-30783, is associated with specific program files and routines in RustDesk Client, including src/rendezvous_mediator.Rs and src/hbbs_http/sync.Rs, particularly in the API sync loop and config handling. The CVSS vector is CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, indicating a medium severity with a score of 4.8. This vulnerability is classified under CWE-602 and CWE-841.

Defensive priority

Medium priority due to local access requirement but potential for privilege escalation; immediate patching recommended for exposed systems.

Recommended defensive actions

  • Inventory and assess all systems using RustDesk Client versions up to 1.4.8.
  • Apply patches or updates to RustDesk Client to version 1.4.9 or later.
  • Review and limit local privilege escalation paths.
  • Monitor for suspicious API sync loop and config handling activities.
  • Implement compensating controls for high-risk systems.

Evidence notes

The primary evidence for this vulnerability comes from the NVD and CVE.org records. The vulnerability affects RustDesk Client up to version 1.4.8 across multiple platforms. Defenders should verify their system configurations and review official advisories for accurate details.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-30783 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-30783

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-30783 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-30783

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Exploit, Third Party Advisory

  • Source reference

    Unverified legacy reference

    URL: https://rustdesk.com/docs/en/client/

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Product

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://www.vulsec.org/

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Third Party Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.