CVE-2026-46331 RustDesk Session Permission Bypass — Unauthorized Remote Control

Ibrahim Saud@tektrix

•updated Jun 30, 2026•27•0•34

Detects anomalous activity associated with the exploitation of RustDesk session permission bypass vulnerabilities. Specifically identifies 'rustdesk.exe' spawning suspicious child processes (indicative of post-exploitation command execution) or initiating outbound network connections on non-standard relay ports, which may signal a compromised remote access session.