AnyDesk has published an advisory for CVE-2026-109390, a critical vulnerability in its Linux client. An unauthenticated attacker who can reach an affected machine over the network can run code on it. Proof of concept exploit code is already public, so anyone using AnyDesk on Linux should upgrade to version 8.0.3 or later today.
What the flaw allows
The bug scores 9.8 on CVSS v3.1, which puts it in the critical band. The attacker needs no login and no user interaction beyond a direct network connection to the target. Once connected, they can execute arbitrary code.
When AnyDesk runs as a system service, that code runs as root. A successful attack then gives the attacker the whole machine.
Is it being exploited?
AnyDesk says it has no evidence of active exploitation against customer systems right now. That covers what the company has seen, and it was written alongside a public proof of concept. Anyone can now test the flaw against exposed machines, so the quiet period is a head start for defenders and probably a short one.
Block inbound access to TCP port 7070 from untrusted networks, and allow AnyDesk connections only from sources you trust. AnyDesk is clear that these steps reduce exposure without fixing the vulnerability, so the upgrade still has to happen.
Remote access tools tend to get installed one machine at a time, so start by listing every Linux host that runs AnyDesk.
For Latest Tech Updates Please follow us :
facebook | twitter | instagram | telegram | whatsapp
