Home RustDesk CVE-2026-3598
Back to RustDesk

CVE-2026-3598

RustDesk Server Pro

RustDesk CVSS 7.5 Updated March 31, 2026

Executive Risk Summary

"A Use of a Broken or Risky Cryptographic Algorithm vulnerability in RustDesk Server Pro allows an attacker to retrieve embedded sensitive data. This issue affects RustDesk Server Pro versions through 1.7.5."

Anticipated Attack Path

  1. 1. An attacker identifies a vulnerable RustDesk Server Pro instance
  2. 2. The attacker exploits the broken cryptographic algorithm to access sensitive data
  3. 3. The attacker retrieves embedded sensitive data, potentially leading to further exploitation

Am I Vulnerable?

  • Is your RustDesk Server Pro version 1.7.5 or earlier?
  • Are you using the affected Config string generation or web console export modules?
  • Have you implemented any mitigations or workarounds for this vulnerability?

Operational Audit Arsenal

Target Type Server
Target Asset RustDesk Server Pro
Standard Path Management Plane / Web UI

Manual Verification Required

This is a non-Windows asset (RustDesk). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.

Patch Impact Forecast

Reboot Required Likely

Moderate, may require downtime for patch application

Internal Work Notes

RustDesk Server Pro vulnerability (CVE-2026-3598) - potential sensitive data exposure, recommend immediate patching or mitigation

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related RustDesk Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.