rustdesk-api vulnerabilities

CVEs whose affected-version data names the rustdesk-api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111324Medium· 5.3

yesterday

rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname,…

▾ Sunlitlejianwen · rustdesk-apivia CVEORG