Remote Code Execution Vulnerability in Deskflow Keyboard and Mouse Sharing Application

CVE-2026-65832

What is CVE-2026-65832?

The Deskflow application, used for sharing keyboard and mouse inputs, has a security vulnerability in its earlier versions that allows a remote unauthenticated server to send malicious options. This can corrupt internal translation tables, leading to potential data disclosure or application crashes. The specific defect lies within the handling of modifier options that can lead to out-of-bounds access in critical data structures. This flaw was effectively mitigated in continuous build 1.26.0.299, underscoring the necessity for users to update promptly to safeguard against exploitation.

References