CVE-2026-58056

Name of the Vulnerable Software and Affected Versions RustDesk (affected versions not specified)

Description An issue exists where incoming control messages are gated based on per-capability flags instead of the session's authorized connection type. Because a file-transfer session fails to clear these flags, a peer with only FileTransfer authorization can perform actions outside its granted scope. This allows the peer to inject keyboard and mouse input and access the unguarded screenshot and display-capture handlers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.