Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
-
Security researchers have released a fully working exploit for a pre-authentication remote code execution vulnerability in AnyDesk for Linux. The flaw allows an attacker to gain root access before any connection is approved, meaning no user interaction or authentication is required to trigger it.
The vulnerability was patched in AnyDesk 8.0.3 back in June, but the changelog only described the fix as resolving "a bug that could lead to a crash." No CVE ID was assigned at the time, and no security advisory accompanied the release, leaving many users unaware of the severity of the issue.
Key points:
- Affected platform: AnyDesk for Linux
- Impact: Pre-auth remote code execution leading to root access
- Fixed version: 8.0.3
- Patch disclosure: Described only as a crash fix, with no CVE assigned
- Exploit status: A full working exploit has now been published by researchers
Given that the patch was quietly shipped without a security advisory, organizations running older AnyDesk builds on Linux should verify their installed version and upgrade to 8.0.3 or later as soon as possible.
Source: The Hacker News
Has anyone checked whether their Linux endpoints are still running an AnyDesk build older than 8.0.3?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login