CVE-2022-32450: AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write...

Security readout for executives and security teams

CVE-2022-32450 affects AnyDesk 7.0.9. A local user may abuse how AnyDesk writes chat-related data into that user’s profile while running with SYSTEM privileges. This can lead to elevated privileges or local denial of service. It requires local access, but it matters on shared workstations and managed endpoints. Exposure is likely limited to Windows endpoints running AnyDesk 7.0.9 where untrusted or lower-privileged users can log in locally. Organizations using AnyDesk broadly for remote support should inventory versions, especially on shared devices. Treat as a near-term endpoint hygiene issue. It is not shown as actively exploited, but local SYSTEM privilege escalation in remote-access software can materially increase attacker impact after initial access. Mitigation focus: Inventory AnyDesk installations and identify version 7.0.9.; Check current AnyDesk vendor guidance for fixed versions or supported upgrade paths.; Upgrade or remove affected AnyDesk installations where feasible..

Prepared

Jul 9, 2026, 12:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.