PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-30798 rustdesk-client CVE debrief

CVE-2026-30798 is a HIGH-severity vulnerability (CVSS Score: 8.2) affecting RustDesk Client versions through 1.4.8 on multiple platforms (Windows, MacOS, Linux, iOS, Android). The issue stems from Insufficient Verification of Data Authenticity and Improper Handling of Exceptional Conditions in the heartbeat sync loop and strategy processing modules. This vulnerability, associated with program files src/hbbs_http/sync.Rs and the stop-service handler in the heartbeat loop, allows for Protocol Manipulation. Defenders should prioritize patching due to the high severity and potential for exploitation.

Vendor
rustdesk-client
Product
Unknown
CVSS
HIGH 8.2
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-05
Original CVE updated
2026-06-22
Advisory published
2026-03-05
Advisory updated
2026-06-22

Who should care

Organizations and individuals using RustDesk Client versions through 1.4.8 on Windows, MacOS, Linux, iOS, and Android should prioritize patching this vulnerability. Given the high CVSS score of 8.2, defenders must assess their exposure and take immediate action to limit potential risks associated with protocol manipulation.

Technical summary

The vulnerability CVE-2026-30798 is caused by Insufficient Verification of Data Authenticity and Improper Handling of Exceptional Conditions in RustDesk Client. Specifically, the heartbeat sync loop and strategy processing modules are affected, which are associated with the program files src/hbbs_http/sync.Rs and the stop-service handler. This issue allows for Protocol Manipulation and affects RustDesk Client versions through 1.4.8 across various platforms including Windows, MacOS, Linux, iOS, and Android.

Defensive priority

High priority due to CVSS score of 8.2 and potential for protocol manipulation.

Recommended defensive actions

  • Inventory and assess exposure of RustDesk Client versions through 1.4.8
  • Review official advisories and documentation for mitigation strategies
  • Apply patches or updates provided by the vendor to RustDesk Client
  • Implement compensating controls to monitor and limit potential protocol manipulation attempts
  • Track exceptions and anomalies in heartbeat sync loop and strategy processing modules

Evidence notes

The primary evidence for this vulnerability comes from the CVE record and NVD detail pages. The vulnerability affects RustDesk Client versions through 1.4.8. Defenders should verify the version of RustDesk Client in use and check for any patches or updates provided by the vendor. The CVE and NVD entries provide crucial information on the affected products and potential impacts.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-30798 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-30798

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-30798 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-30798

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Exploit, Third Party Advisory

  • Source reference

    Unverified legacy reference

    URL: https://rustdesk.com/docs/en/client/

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Product

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://www.vulsec.org/

    2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe - Third Party Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.