RustDesk Session Permission Bypass and Downgrade Handshake (CVE-2025-15661/CVE-2026-46331)

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•12

Detects potential exploitation of RustDesk remote access software, focusing on unauthorized process execution from RustDesk-related binaries (including session relay and rendezvous components) and the presence of documented proof-of-concept (PoC) artifacts associated with session permission bypass vulnerabilities.