A high-severity authentication bypass vulnerability in AnyDesk allows an attacker to gain persistent, unauthorized access to remote devices by manipulating security profiles.

The vulnerability exists because an authenticated remote user with "Control my device" permissions can modify application settings to enable a Full Access profile without requiring counterparty authorization. This allows the attacker to establish subsequent connections to the host without any interaction or consent from the victim.

The ability to gain persistent, unauthorized access to a remote system poses a severe risk to organizational data integrity and confidentiality. Given the CVSS score of 8.2, this vulnerability is considered a high-risk flaw that could facilitate lateral movement or the deployment of malicious software within an internal network. Organizations utilizing remote access tools for support or administration are at significant risk of compromise if their AnyDesk instances are not secured.

Immediate Action: Update the AnyDesk application to a version beyond 9.0.4 immediately to remediate the underlying logic flaw.

Proactive Monitoring: Review AnyDesk access logs for unauthorized connections or unexpected modifications to security settings and user profiles.

Compensating Controls: Restrict remote access permissions to trusted users only and implement network-level access controls to limit the exposure of remote administration software.

Public Exploit Available: No

This vulnerability represents a significant security risk for any environment relying on AnyDesk for remote support or connectivity. Administrators should prioritize updating all instances of the software to the latest available version to close the unauthorized access path. Failure to patch allows a previously authorized user to transform their access into persistent, unauthenticated-style entry, which could be leveraged for long-term espionage or system control.