Data Manipulation and Spoofing Vulnerability in AnyDesk
CVE-2025-27916

7.5HIGH

Key Information:

Vendor

AnyDesk
Status
AnyDesk
Vendor
CVE Published:
6 November 2025

What is CVE-2025-27916?

A security issue has been identified in AnyDesk versions up to 9.0.4. When establishing a connection between two clients via an IP address, an attacker could exploit this vulnerability to manipulate the data being transmitted and potentially spoof the AnyDesk ID. This could lead to unauthorized access or impersonation, compromising the integrity of the connection. Users of AnyDesk are advised to stay informed about this vulnerability and apply necessary patches.

References

https://anydesk.com/en/changelog/windows
https://dspace.cvut.cz/bitstream/handle/10467/122721/F8-D...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.