CVE-2026-100417CWE-862broken-access-control

CVE-2026-100417

Low · published September 26, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing the FileGroupDescriptorW format identifier.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
2.3 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-09-26T01:17Z
References (6)
https://github.com/rustdesk/rustdesk · [email protected]https://github.com/rustdesk/rustdesk/blob/1.4.9/libs/clipboard/src/windows/wf_cliprdr.c#L2728-L2770 · [email protected]https://github.com/rustdesk/rustdesk/blob/1.4.9/src/ui_cm_interface.rs#L618-L638 · [email protected]https://github.com/rustdesk/rustdesk/commit/f299fb9906006247863250d7dfaa016f29eef7a4 · [email protected]https://github.com/rustdesk/rustdesk/pull/16333 · [email protected]https://www.vulncheck.com/advisories/rustdesk-before-1.5.0-one-way-file-transfer-bypass · [email protected]
EPSS history
Timeline
  • 27 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 25 SEP 20:25Z
    RustDesk before 1.5.0 One-Way File Transfer Bypass
    cvelistv5