ZDI-CAN-27909: ZDI-26-117: RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of RustDesk Client for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Transfer File feature. By uploading a symbolic link, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM.
Other sources
This vulnerability allows local attackers to disclose sensitive information on affected installations of RustDesk Client for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-2490.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-27909?
The severity of ZDI-CAN-27909 is classified as high due to its potential for exposing sensitive information.
How do I fix ZDI-CAN-27909?
To mitigate ZDI-CAN-27909, ensure that you update to the latest version of RustDesk Client for Windows.
What type of attack can exploit ZDI-CAN-27909?
ZDI-CAN-27909 can be exploited by local attackers to disclose sensitive information on vulnerable systems.
What versions of RustDesk are affected by ZDI-CAN-27909?
ZDI-CAN-27909 affects all installations of RustDesk Client for Windows that are not patched.
Can ZDI-CAN-27909 lead to unauthorized access?
While ZDI-CAN-27909 allows information disclosure, it does not directly lead to unauthorized access without further exploitation.