CVE-2026-73102

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-73102

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73102.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-73102

Published

2026-08-26T13:00:00Z

Modified

2026-08-30T08:17:28Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

RustDesk Path Traversal via macOS Clipboard File-Paste

Details

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an active clipboard file-paste session can use parent-directory components or absolute paths to write files outside the intended target directory at locations writable by the RustDesk process. Commit 6f1eb16 fixes the issue by validating descriptor names and safely joining paths.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73102.json"
}

References

Affected packages

Git / github.com/rustdesk/rustdesk

Affected ranges

Type

GIT

Repo

https://github.com/rustdesk/rustdesk

Events

Introduced

3dbe27ea57429cf2b57cbae3b894a9f9a88ff8b5

Fixed

6c578292e8ebbbec708b76986ba8c4bc7c509747

Fixed

6f1eb164d616e0e2bfbcf8c6b7c8083b09d7ed06

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "1.3.9"
        },
        {
            "fixed": "1.4.9"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.3.9

1.4.0

1.4.1

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

Other

nightly

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73102.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "100699585854239191832595113708392763709",
            "length": 2254
        },
        "id": "CVE-2026-73102-4d40816d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/rustdesk/rustdesk/commit/6f1eb164d616e0e2bfbcf8c6b7c8083b09d7ed06",
        "target": {
            "file": "libs/clipboard/src/windows/wf_cliprdr.c",
            "function": "CliprdrDataObject_GetData"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "189208456078409039448572178680535911940",
                "327759426329834601516484845427119288918",
                "5046787513406906719842933061688732301",
                "182622612242892262826866455463069502275",
                "187680255451104920681413677970035990835",
                "272000987171285168415510662504806449025",
                "75085452307215968273844364924541374696",
                "310919730519852186205071848069321309035",
                "41642513040878048831789732711202223681",
                "154741554763650194654121786668381510328",
                "246573647065404367910748201644670822761",
                "75060161606735125928492259638153385869"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-73102-8141ed05",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/rustdesk/rustdesk/commit/6f1eb164d616e0e2bfbcf8c6b7c8083b09d7ed06",
        "target": {
            "file": "libs/clipboard/src/windows/wf_cliprdr.c"
        }
    }
]

vanir_signatures_modified

"2026-08-30T08:17:28Z"