BetterDesk allows an unauthenticated client to replay a deleted device's identity, effectively bypassing registration controls. By sending a previously used device ID, the attacker can cause the system to recognise the device as legitimate, creating an unauthorized entry that may grant remote access to the desktop management environment. The flaw is a classic ID validation weakness, classified as CWE-294, CWE-345 and CWE-672.

The vulnerability exists in UNITRONIX BetterDesk versions 2.3.0 and earlier. Version 3.0.0‑alpha includes the necessary fix and should be used to replace affected installations. If installation of the newer version is not yet possible, systems remain exposed.

The CVSS score of 7.7 indicates a high severity for potential remote exploitation. No EPSS score is currently available, and the vulnerability is not on CISA’s KEV list. An attacker only needs network access to the BetterDesk service and does not require authentication, making the attack vector a remote unauthenticated client. The lack of a disclosed workaround and the high impact to device registration controls underscore the urgency of applying the patch.