CVE-2026-3598: RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption
Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routines Config export/generation routines.
This issue affects RustDesk Server Pro: through 1.7.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3598?
CVE-2026-3598 has been classified with a medium severity rating due to its use of reversible encoding instead of strong encryption.
How do I fix CVE-2026-3598?
To mitigate CVE-2026-3598, update to a newer version of RustDesk Server Pro that uses secure encryption methods instead of reversible encoding.
Which versions of RustDesk Server Pro are affected by CVE-2026-3598?
CVE-2026-3598 affects versions of RustDesk Server Pro up to and including 1.7.5.
What types of systems are impacted by CVE-2026-3598?
CVE-2026-3598 impacts RustDesk Server Pro installations on Windows, MacOS, and Linux.
Is CVE-2026-3598 related to the security of configuration strings?
Yes, CVE-2026-3598 specifically relates to the insecure generation of configuration strings using reversible encoding, which could expose sensitive information.