Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52mv-rf68-xh44

Опубликовано: 05 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8
CVSS3: 9.8

Описание

Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro on hbbs/hbbr on all server platforms (Rendezvous server (hbbs), relay server (hbbr) modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_server.Rs, src/relay_server.Rs and program routines handle_punch_hole_request(), RegisterPeer handler, relay forwarding.

This issue affects RustDesk Server: through 1.7.5, through 1.1.15.

Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro on hbbs/hbbr on all server platforms (Rendezvous server (hbbs), relay server (hbbr) modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_server.Rs, src/relay_server.Rs and program routines handle_punch_hole_request(), RegisterPeer handler, relay forwarding.

This issue affects RustDesk Server: through 1.7.5, through 1.1.15.

EPSS

Процентиль: 50%
0.00268
Низкий

8.8 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

nvd
25 дней назад

Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro on hbbs/hbbr on all server platforms (Rendezvous server (hbbs), relay server (hbbr) modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_server.Rs, src/relay_server.Rs and program routines handle_punch_hole_request(), RegisterPeer handler, relay forwarding. This issue affects RustDesk Server: through 1.7.5, through 1.1.15.

debian
25 дней назад

Missing Authorization, Missing Authentication for Critical Function vu ...

EPSS

Процентиль: 50%
0.00268
Низкий

8.8 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-306