What is GHSA-9qf7-q6gx-q652?

GHSA-9qf7-q6gx-q652 is a security advisory published by GitHub Security Advisories with Critical severity. Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational...

Which CVE IDs does GHSA-9qf7-q6gx-q652 cover?

GHSA-9qf7-q6gx-q652 covers the following CVE IDs: CVE-2026-30789. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9qf7-q6gx-q652?

GHSA-9qf7-q6gx-q652 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-9qf7-q6gx-q652CriticalCVSS 9.8

Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational...

Vendor

GitHub Security Advisories

Published

March 5, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-30789 →

📋 Description

Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Client login, peer authentication modules) allows Reusing Session IDs (aka Session Replay). This vulnerability is associated with program files src/client.Rs and program routines hash_password(), login proof construction.

This issue affects RustDesk Client: through 1.4.5.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-30789
https://rustdesk.com/docs/en/client
https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub
https://www.vulsec.org
https://github.com/advisories/GHSA-9qf7-q6gx-q652