CVE-2026-3598

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routines Config export/generation routines. This issue affects RustDesk Server Pro: through 1.7.5.

Score

CVSS 4.0 8.7 High

Status

Analyzed - 2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe

Published

2026-03-05

Last modified

2026-03-06

Weaknesses

CWE-327, CWE-684

Affected products

• Rustdesk Server (Rustdesk)
• Rustdesk Server Pro (Rustdesk-server-pro)

References

• https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9…
• https://rustdesk.com/docs/en/client/
• https://www.vulsec.org/