A vulnerability in the software could redirect local USB devices to a remote system, which could help attackers add fake tools.

https://www.bleepingcomputer.com/news/security/bug-in-usb-for-remote-desktop-lets-hackers-add-fake-devices/