Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have published a fully working exploit for a pre-authentication remote code execution vulnerability in AnyDesk for Linux. The flaw allows attackers to gain root access before any connection is approved by the user. AnyDesk silently patched the vulnerability in version 8.0.3 in June, describing it only as a bug fix causing crashes, with no CVE assigned. The lack of transparency around the patch left users unaware of the critical nature of the flaw. The publication of a working exploit significantly raises the risk for unpatched systems. Organizations using AnyDesk on Linux are strongly urged to update to version 8.0.3 or later immediately.