A previously unknown zero-day vulnerability in AnyDesk has been identified that could allow attackers to cause denial-of-service conditions on affected installations of the widely used remote desktop software.
The issue, assigned the identifier CVE-2026-15682, resides in a component responsible for transmitting support-related information. Exploitation leverages a native Windows file system redirection capability that reroutes file operations to an alternate path, enabling an attacker with only limited local access to interfere with the AnyDesk service.
Successful exploitation can result in crashes of either the AnyDesk application itself or broader system instability. Given that AnyDesk is commonly deployed by technical support teams, managed service providers (MSPs), and corporate IT departments, such disruptions can directly impair remote troubleshooting, routine maintenance tasks, and time-sensitive incident response activities.
Security researchers note that the attack does not require elevated privileges beyond basic local access, making it particularly concerning in shared or multi-user environments where AnyDesk is installed.
Until a vendor-supplied fix is confirmed, organizations are strongly encouraged to implement the following mitigations:
- Restrict the ability of untrusted users to execute arbitrary code on systems running AnyDesk.
- Monitor for unusual creation or modification of file system redirection entries.
- Closely follow official communications from AnyDesk regarding patch availability.
- Apply updates immediately once a corrective patch is released.
Users and administrators should treat this vulnerability with high priority due to the tool’s critical role in remote operations across both enterprise and service-provider environments.
