Vulnerability in Deskflow Keyboard and Mouse Sharing Application
CVE-2026-63409

8.2HIGH

Key Information:

Vendor

Deskflow

Status
Deskflow
Vendor
CVE Published:
17 August 2026

What is CVE-2026-63409?

The Deskflow application, designed for keyboard and mouse sharing, contains a vulnerability that allows a malicious server to craft an unusual-length DSOP vector. This specific sequence can lead to unintended behavior during data handling processes, notably in the function chain that manages client connections. When triggered, this vulnerability can result in application crashes, thereby disrupting user experience. This issue was addressed in the latest continuous build, ensuring a more stable and secure interaction between connected clients.

Affected Version(s)

deskflow >= 1.17.0, < 1.26.0.296

References

https://github.com/deskflow/deskflow/security/advisories/...
x_refsource_CONFIRM
https://github.com/deskflow/deskflow/commit/8266fbbe6af93...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.