Exploit Published for AnyDesk Linux Vulnerability

• •A working exploit for a critical vulnerability in AnyDesk Linux has been published.
• •The flaw allows remote code execution before user approval, affecting version 8.0.2.
• •Administrators are advised to update to version 8.1.0 or restrict access to TCP port 7070.

Security researchers have released a working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux 8.0.2, allowing attackers to gain root access before connection approval. The vulnerability, named AnyPwn, was patched in version 8.0.3 in June 2026, but no CVE has been assigned. The exploit targets a heap buffer overflow in AnyDesk's session protocol, specifically over direct TCP connections on port 7070. While the exploit is probabilistic and may not work on all builds, it demonstrates significant risk for users of the affected version. Administrators are urged to update to version 8.1.0 or restrict access to the vulnerable port. The researchers confirmed that the same code path may also be reachable via AnyDesk's relay servers. The vulnerability was first reported on June 22, 2026, but the lack of a formal advisory from AnyDesk raises concerns about awareness and response.