RustDesk Client Missing Authorization Vulnerability Allowing Application API Message Manipulation

A missing authorization vulnerability has been identified in the RustDesk Client across multiple platforms, including Windows, macOS, Linux, iOS, and Android. This vulnerability allows for application API message manipulation through a man-in-the-middle attack. The issue is linked to the Flutter URI scheme handler and the 'importConfig()' routine, affecting RustDesk Client versions through 1.4.5.

Impact

Exploitation of this vulnerability could lead to unauthorized manipulation of application API messages, potentially allowing an attacker to interfere with the normal operation of the RustDesk Client.