Security Alert: AnyDesk Detects a Critical Vulnerability That Allows Remote Code Execution on Linux
AnyDesk has issued a security alert regarding a critical vulnerability identified as CVE-2026-109390, which primarily affects its Linux clients. The vulnerability could allow an attacker to remotely execute code with administrator privileges. We at Isla Cloud Solutions recommend immediately updating the affected versions.
AnyDesk Issues Alert About a Critical Vulnerability in Its Remote Access Software
October 16, 2026. AnyDesk, one of the remote access and support tools used in enterprise environments, has issued a security advisory regarding a critical vulnerability in its application.
The vulnerability, identified as CVE-2026-109390, has a score of 9.8 out of 10 on the CVSS v3.1 scale, placing it among the highest severity levels.
According to information published by AnyDesk, the flaw could allow a remote attacker, without the need for authentication, to execute arbitrary code on a vulnerable Linux device, provided they can establish a direct network connection with the affected machine.
The risk is particularly high when AnyDesk is running as a system service, since the malicious code could be executed with root privileges, giving the attacker a very high level of access to the device.
Furthermore, proof-of-concept (PoC) code demonstrating the ability to exploit this vulnerability is already publicly available.
Although AnyDesk states that, at this time, it is not aware of any active attacks against its customers’ systems, the public availability of this code makes it especially important to apply security updates as soon as possible.
Which operating systems are affected?
The vulnerability primarily affects AnyDesk clients for Linux, although the vendor has also identified its presence in versions for Windows and macOS.
AnyDesk recommends updating the applications to the following versions:
Operating System | Recommended Version |
|---|---|
Linux | 8.0.3 or later |
Windows | 9.7.8 or later |
macOS | 9.7.2 or later |
For Windows and macOS, the vendor notes that there is currently no known method to exploit the vulnerability on these platforms. However, it recommends updating as a preventive measure.
The priority should be on Linux systems running vulnerable versions of AnyDesk, especially those accessible from external networks.
What should companies do to protect themselves?
At Isla Cloud Solutions, we recommend that organizations using AnyDesk review their installations and implement the following security measures:
1. Update AnyDesk immediately
Check the version installed on all devices and update to the latest available version.
On Linux systems, it is especially important to install version 8.0.3 or later.
2. Review devices with remote access
Identify the computers and servers that use AnyDesk, paying special attention to those that keep the service running continuously.
3. Restrict incoming connections
If it is not possible to update Linux systems immediately, AnyDesk recommends blocking incoming access to TCP port 7070 from untrusted networks.
It also advises allowing connections only from trusted addresses or networks until the update is complete.
These measures reduce risk exposure but do not resolve the vulnerability.
4. Monitor for potential suspicious activity
Review activity logs and remote connections to detect unusual behavior.
The vendor has also published technical information and indicators of compromise that can help system administrators identify potential exploitation attempts.
5. Download updates from official sources
To avoid additional risks, new versions should be downloaded exclusively from the manufacturer’s official website:
The Importance of Keeping Remote Access Tools Up to Date
Remote support and administration applications are essential for many companies, as they allow technical teams to access systems, resolve incidents, and perform maintenance tasks without having to travel.
However, due to the level of access they can provide, a vulnerability in these types of tools can pose a significant risk to the security of the corporate infrastructure.
This incident highlights the need to maintain an update policy, monitor remote access services, and implement security measures that limit unnecessary connections.
Proactive vulnerability management helps reduce system exposure and prevent known flaws from compromising operational continuity.
Isla Cloud Solutions: Advanced IT Management and Cybersecurity for Businesses
At Isla Cloud Solutions, we help organizations keep their technology infrastructures up to date, managed, and protected against new threats.
Through our advanced IT systems administration, IT maintenance, and cybersecurity services, we focus on infrastructure monitoring, update management, and security risk prevention.
When faced with critical vulnerabilities like the one detected in AnyDesk, acting quickly is essential to reduce system exposure.
If your company uses AnyDesk and you need help checking installed versions, applying updates, or reviewing the security of your devices, our technical team can assist you.
More official information
You can view the full security advisory, the affected versions, and technical recommendations on the manufacturer’s security center:
AnyDesk Trust Center