AnyPwn gives root on AnyDesk Linux before any connection is approved

On 8 October 2026, a public exploit named AnyPwn made a pre-authentication remote code execution flaw in AnyDesk Linux reliably exploitable: a heap overflow in the session protocol yields root, fixed in 8.0.3 but with no CVE and no security advisory. Update to 8.1.0 and restrict TCP port 7070 in the meantime.