CVE-2026-30798 Details
Description
Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop, strategy processing modules) allows Protocol Manipulation. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routines stop-service handler in heartbeat loop. This issue affects RustDesk Client: through 1.4.8.
A vulnerability allowing protocol manipulation has been identified in the RustDesk Client across multiple platforms, including Windows, macOS, Linux, iOS, and Android. This issue arises from insufficient verification of data authenticity and improper handling of exceptional conditions, particularly within the heartbeat synchronization loop and strategy processing modules. The vulnerability affects RustDesk Client versions through 1.4.5.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub | VULSec Labs | ExploitThird Party Advisory |
| https://rustdesk.com/docs/en/client/ | VULSec Labs | Product |
| https://www.vulsec.org/ | VULSec Labs | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-345 | Insufficient Verification of Data Authenticity | VULSec Labs |
| CWE-755 | Improper Handling of Exceptional Conditions | VULSec Labs |
Affected Products
| Product | Versions |
|---|---|
| rustdesk rustdesk | <= 1.4.5 |
CPE
Remediation
| |
| apple iphone os | All versions |
CPE
Remediation
| |
| apple macos | All versions |
CPE
Remediation
| |
| google android | All versions |
CPE
Remediation
| |
| linux linux kernel | All versions |
CPE
Remediation
| |
| microsoft windows | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 22, 2026 | CVE Modified | VULSec Labs |
| Jun 17, 2026 | CVE Modified | VULSec Labs |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 10, 2026 | Initial Analysis | [email protected] |
| Mar 5, 2026 | CVE Modified | VULSec Labs |
| Mar 5, 2026 | New CVE Received | VULSec Labs |