AnyDesk security flaw Allowing code to be run remotely With Root Privileges

What happened

Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk (remote desktop application) Linux version 8.0.2, named AnyPwn. Read AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges By Divya October 12, 2026 Share Facebook Twitter Pinterest WhatsApp Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn.

It targets a specific AnyDesk 8.0.2 binary operating in service mode, with offsets tailored for the tested environment. This vulnerability allows remote command execution before the user approves desktop control.

Because the AnyDesk service typically runs with root privileges, successful exploitation lets attackers gain root access to the system. CVE/vulnerability Cyber Security News Vulnerabilities 2 min.

A proof-of-concept demonstration illustrates by Rick de Jager from the V12 security team, the exploitation method via direct connections to TCP port 7070 on Linux x86_64 systems. AnyDesk Vulnerability The vulnerability lies within AnyDesk’s session protocol, specifically in its mode-5 stream packet handler.