RustDesk versions prior to 1.5.0 contain a vulnerability in the Cliprdr message handler on Linux and macOS where file transfer permissions are not properly validated for incoming file clipboard messages. This allows authenticated remote peers, even if file transfer permissions are disabled, to place files onto the host clipboard and retrieve copied files and clipboard contents from the process-wide clipboard cache.