CVE-2026-30798 describes a vulnerability in RustDesk Client (up to version 1.4.8) where insufficient verification of data authenticity and improper handling of exceptional conditions in the heartbeat synchronization loop and strategy processing modules can lead to protocol manipulation. The affected code includes src/hbbs_http/sync.Rs and the stop-service handler routine. This weakness could allow an attacker to interfere with the protocol operations of the client, potentially impacting its normal functioning.

The vulnerability allows protocol manipulation due to insufficient verification of data authenticity and improper handling of exceptional conditions in the heartbeat loop. This could lead to unauthorized interference with the client's communication protocol, potentially disrupting service or enabling further attacks. The CVSS 4.0 score of 8.2 indicates a high impact with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability.

No official patch or remediation information is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should monitor official RustDesk communications for updates and consider limiting exposure of the affected client versions in sensitive environments.