CVE-2026-73102: medium-severity vulnerability in rustdesk
RustDesk Path Traversal via macOS Clipboard File-Paste
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.4%
RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an active clipboard file-paste session can use parent-directory components or absolute paths to write files outside the intended target directory at locations writable by the RustDesk process. Commit 6f1eb16 fixes the issue by validating descriptor names and safely joining paths.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
rustdesk · rustdeskRelated CVEs — rustdesk
In the same product, most dangerous first.
CVE-2026-73108HIGHRustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodecEPSS 0.8%CVE-2026-76840HIGHRustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse LengthEPSS 0.4%CVE-2026-100417LOWRustDesk before 1.5.0 One-Way File Transfer BypassEPSS 0.2%CVE-2026-100388MEDIUMRustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard MessagesEPSS 0.2%