CVE-2026-15681 is a local denial-of-service vulnerability in AnyDesk affecting the handling of screen recording files. Exploitation requires the attacker to have the ability to execute low-privileged code on the target system. The vulnerability involves creating a junction to abuse the service's file handling, enabling arbitrary file creation and resulting in a denial-of-service condition. The vulnerability was reported to the vendor in March 2025, but the vendor has not provided a fix or acknowledged responsibility. The Zero Day Initiative published the advisory as a 0-day in July 2026 due to lack of vendor response.

Successful exploitation allows a local attacker with low privileges to cause a denial-of-service condition on the affected system by abusing the screen recording file handling mechanism in AnyDesk. There is no impact on confidentiality or integrity reported. The denial-of-service could disrupt legitimate use of the AnyDesk service.

No official patch or fix is currently available. The vendor has not taken responsibility or provided remediation. The only recommended mitigation is to restrict interaction with the AnyDesk product to trusted users and environments to reduce the risk of exploitation.