# Bitrise: Public VNC access is temporarily disabled on remote access builds and RDE sessions

> Bitrise status incident “Public VNC access is temporarily disabled on remote access builds and RDE sessions” on 2026-07-30: impact minor (vendor’s label), 32 d, 2 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/bitrise/incidents/t2hyy547jtkq
Last updated: 2026-10-26T04:06:45Z

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-07-30 15:40 UTC · Resolved: 2026-08-31 13:29 UTC · Duration: 32 d
- Updates: 2 · Affected components: ⚙️ Builds (CI)
- [Vendor status page: https://stspg.io/6jy54pqm8fn4](https://stspg.io/6jy54pqm8fn4)
- [Company: Bitrise](https://rewindex.com/company/bitrise.md)

## CVEs mentioned

- [CVE-2026-43760](https://rewindex.com/cve/CVE-2026-43760.md) (CVSS 8.6 high): says not affected (“unaffected”)

_Only CVEs the incident text names by id, or that the notice says the vendor is not affected by. Not a statement of cause._

## Timeline of updates

- **identified** 2026-07-30 15:40 UTC: A macOS Screen Sharing (VNC) vulnerability, CVE-2026-43760, has been announced. To protect your machines, we’ve disabled internet-facing access to VNC. SSH is unaffected and remains fully available. We have no evidence that any customer machine was accessed as a result of this vulnerability. This is a proactive measure to reduce exposure. You can connect to the VNC server by tunnelling it over SSH: ssh -L 5900:localhost:5900 $SSH\_ADDRESS Then connect to localhost:5900 with a VNC client.
- **resolved** 2026-08-31 13:29 UTC: This incident has been resolved.


---
Canonical: https://rewindex.com/company/bitrise/incidents/t2hyy547jtkq · Markdown: https://rewindex.com/company/bitrise/incidents/t2hyy547jtkq.md · JSON: https://rewindex.com/api/v1/companies/bitrise/incidents/t2hyy547jtkq · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T04:06:45.509Z