CVE-2026-100388Published
RustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard Messages
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-100388 · Microsoft / collected KEV context
cve-program · CVE-2026-100388
- https://github.com/rustdesk/rustdesk/pull/16333
- https://github.com/rustdesk/rustdesk/commit/f299fb9906006247863250d7dfaa016f29eef7a4
- https://github.com/rustdesk/rustdesk/blob/1.4.9/src/server/connection.rs#L3074-L3092
- https://github.com/rustdesk/rustdesk
- https://www.vulncheck.com/advisories/rustdesk-before-1.5.0-missing-authorization-check-on-incoming-file-clipboard-messages
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.