PT-2026-110610 · Anydesk · Anydesk
CVE-2026-109390
·
Published
2026-10-12
·
Updated
2026-10-12
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
AnyDesk versions prior to 8.0.3
Description
A heap-based buffer overflow occurs in the session protocol stream packet handler for mode 5 because a payload length value is not validated. This allows unauthenticated remote attackers to execute arbitrary code. On Linux systems, this can lead to command execution with root privileges without requiring the victim to approve desktop control.
Recommendations
Update AnyDesk to version 8.0.3 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Anydesk