What is GHSA-3364-g3c8-w87q?

GHSA-3364-g3c8-w87q is a security advisory published by GitHub Security Advisories with High severity. AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute...

Which CVE IDs does GHSA-3364-g3c8-w87q cover?

GHSA-3364-g3c8-w87q covers the following CVE IDs: CVE-2016-20094. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3364-g3c8-w87q?

GHSA-3364-g3c8-w87q has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-3364-g3c8-w87qHighCVSS 7.8

AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute...

Vendor

GitHub Security Advisories

Published

June 19, 2026

Last Modified

June 19, 2026

🔗 CVE IDs covered (1)

CVE-2016-20094 →

📋 Description

AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with elevated privileges during application startup or system reboot.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2016-20094
https://www.exploit-db.com/exploits/40410
https://www.vulncheck.com/advisories/anydesk-unquoted-service-path-elevation-of-privilege
http://anydesk.com
http://anydesk.com/download
https://github.com/advisories/GHSA-3364-g3c8-w87q