CVE-2026-100417Published
RustDesk before 1.5.0 One-Way File Transfer Bypass
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-100417 · Microsoft / collected KEV context
cve-program · CVE-2026-100417
- https://github.com/rustdesk/rustdesk/pull/16333
- https://github.com/rustdesk/rustdesk/commit/f299fb9906006247863250d7dfaa016f29eef7a4
- https://github.com/rustdesk/rustdesk/blob/1.4.9/src/ui_cm_interface.rs#L618-L638
- https://github.com/rustdesk/rustdesk/blob/1.4.9/libs/clipboard/src/windows/wf_cliprdr.c#L2728-L2770
- https://github.com/rustdesk/rustdesk
- https://www.vulncheck.com/advisories/rustdesk-before-1.5.0-one-way-file-transfer-bypass
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.