RustDesk Client for Windows Transfer File Link Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in the RustDesk Client for Windows, specifically within the Transfer File feature. This vulnerability allows local attackers to read arbitrary files by uploading a symbolic link, potentially disclosing sensitive information in the context of the SYSTEM user. To exploit this vulnerability, an attacker must first have the ability to execute low-privileged code on the target system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the affected system.

Remediation

RustDesk has released an update to address this vulnerability. Details about the update can be found in the RustDesk GitHub repository.