Remote Access Manipulation in AnyDesk by Unauthorized Users
CVE-2025-27919

8.2HIGH

Key Information:

Vendor

AnyDesk
Status
AnyDesk Remote Desktop Software
Vendor
CVE Published:
6 November 2025

What is CVE-2025-27919?

A security flaw in AnyDesk allows a remote user granted 'Control my device' permission to change settings without the counterpart's approval. This vulnerability enables attackers to create a password for the Full Access profile, facilitating unauthorized future access without needing re-confirmation. Users must be cautious and ensure they control who has remote access to their devices.

References

https://anydesk.com/en/changelog/windows
https://dspace.cvut.cz/bitstream/handle/10467/122721/F8-D...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.