CVE-2026-30797

The record

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files flutter/lib/common.Dart and program routines importConfig() via URI handler. This issue affects RustDesk Client: through 1.4.5.

Affected packages

Related vulnerabilities

• CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation… CWE-749
• CVE-2026-86711 electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron… CWE-749
• CVE-2026-52877 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
• CVE-2026-48056 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
• CVE-2026-20467 In apusys, there is a possible escalation of privilege due to a missing bounds check. CWE-749
• CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability CWE-749
• CVE-2026-14620 webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints… CWE-749
• CVE-2026-54753 Nx is a monorepo solution for TypeScript and polyglot codebases. CWE-749