<![CDATA[Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access]]>

<![CDATA[Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access]]>Security researchers have released a fully working exploit for a pre-authentication remote code execution vulnerability in AnyDesk for Linux. The flaw allows an attacker to gain root access before any connection is approved, meaning no user interaction or authentication is required to trigger it.

The vulnerability was patched in AnyDesk 8.0.3 back in June, but the changelog only described the fix as resolving "a bug that could lead to a crash." No CVE ID was assigned at the time, and no security advisory accompanied the release, leaving many users unaware of the severity of the issue.

Key points:

Affected platform: AnyDesk for Linux
Impact: Pre-auth remote code execution leading to root access
Fixed version: 8.0.3
Patch disclosure: Described only as a crash fix, with no CVE assigned
Exploit status: A full working exploit has now been published by researchers

Given that the patch was quietly shipped without a security advisory, organizations running older AnyDesk builds on Linux should verify their installed version and upgrade to 8.0.3 or later as soon as possible.

Source: The Hacker News

Has anyone checked whether their Linux endpoints are still running an AnyDesk build older than 8.0.3?

]]>https://xploitlk.com/topic/634/researchers-publish-working-exploit-for-pre-auth-anydesk-linux-flaw-that-gives-root-accessRSS for NodeTue, 27 Oct 2026 09:28:44 GMTSat, 10 Oct 2026 08:30:18 GMT60