Session-Downgrade

RustDesk Relay Session Downgrade and FileTransfer Authorization Scope Bypass

This entry covers two related but distinct RustDesk findings. First, RustDesk's client can fail open on secure-session setup: when the signed peer key material from the rendezvous/relay path is missing or invalid, the client requests a non-secure relay and…