What is GHSA-39g5-2q66-34fm?

GHSA-39g5-2q66-34fm is a security advisory published by GitHub Security Advisories with Critical severity. A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS,...

Which CVE IDs does GHSA-39g5-2q66-34fm cover?

GHSA-39g5-2q66-34fm covers the following CVE IDs: CVE-2026-30792. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-39g5-2q66-34fm?

GHSA-39g5-2q66-34fm has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-39g5-2q66-34fmCriticalCVSS 8.1

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS,...

Vendor

GitHub Security Advisories

Published

March 5, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-30792 →

📋 Description

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files src/hbbs_http/sync.Rs, hbb_common/src/config.Rs and program routines Strategy merge loop in sync.Rs, Config::set_options().

This issue affects RustDesk Client: through 1.4.5.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-30792
https://rustdesk.com/docs/en/self-host/client-configuration/advanced-settings
https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub
https://www.vulsec.org
https://github.com/advisories/GHSA-39g5-2q66-34fm