CVE-2025-27916

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0

High · published November 6, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

⚡ A crafty connection error lets attackers impersonate any user on AnyDesk! This is a serious warning for versions before 9.0.6 for Windows and 8.0.0 for Android! 🔥 Think of it like a hotel receptionist who accepts any name without checking an ID — someone could just walk in and claim to be another guest. This vulnerability allows an attacker to manipulate data and spoof AnyDesk IDs by simply leveraging an IP connection. If exploited, an attacker can easily impersonate legitimate users, accessing sensitive information or taking control of sessions. This could lead to unauthorized access to private data or even remote control of devices. It's absolutely devastating for user security!

Put simply

Think of it like a hotel receptionist who accepts any name without checking an ID — someone could just walk in and claim to be another guest. This vulnerability allows an attacker to manipulate data and spoof AnyDesk IDs by simply leveraging an IP connection. This vulnerability allows the manipulation of data during the connection establishment between clients by exploiting IP addresses, enabling attackers to spoof AnyDesk IDs without authentication.

What to do

If exploited, an attacker can easily impersonate legitimate users, accessing sensitive information or taking control of sessions. This could lead to unauthorized access to private data or even remote control of devices. It's absolutely devastating for user security! To protect yourself, immediately update AnyDesk to version 9.0.6 for Windows or 8.0.0 for Android. Additionally, ensure users are educated about verifying connections and consider implementing additional authentication methods in your security practices. You've got this! With these steps, you'll strengthen your security and keep your remote sessions safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Published
2025-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0
    cvelistv5