Critical Security Flaws in FreeRDP: Remote Code Execution Vulnerabilities
Summary
ALSA-2026:36203: Important: freerdp security update. Affects freerdp versions < 2:3.10.3-12.el10_2.6. Fixed in 2:3.10.3-12.el10_2.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote servers and desktops. It is widely used for accessing Microsoft Windows machines, xrdp, and VirtualBox environments. The package includes various components such as xfreerdp, freerdp-devel, and freerdp-libs, which provide essential functionalities for remote desktop connections. However, recent vulnerabilities have been identified that expose users to significant security risks, including remote code execution and denial of service.
Vulnerability Detail
The vulnerabilities in FreeRDP stem from multiple coding issues, including heap-buffer-overflows, use-after-free errors, and out-of-bounds writes. These flaws can be exploited by attackers to execute arbitrary code on the affected systems, potentially leading to unauthorized access and data breaches. Specific vulnerabilities include CVE-2026-40033, which allows remote code execution via heap-buffer-overflow, and CVE-2026-44422, which enables arbitrary code execution through a crafted RDPGFX PDU. The ramifications of these vulnerabilities are severe, as they can compromise the integrity and confidentiality of sensitive data.
How To Fix
Minimum fixed version
2:3.10.3-12.el10_2.6
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the FreeRDP services or disable the use of RDP connections until the packages are updated. Additionally, monitoring network traffic for suspicious activities can help mitigate risks while waiting for the patch.
Conclusion
The vulnerabilities in FreeRDP present significant security risks that can lead to remote code execution and denial of service. It is crucial for users to update their FreeRDP packages to the latest patched version to mitigate these risks. Additionally, utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote desktops and servers.
The main vulnerabilities include heap-buffer-overflows, use-after-free errors, and out-of-bounds writes, which can lead to remote code execution.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application using the Vulert playground at Vulert Scanner without needing to sign up.
If an immediate update is not possible, consider limiting access to FreeRDP services and monitoring network traffic for any unusual activities.
For detailed information about the vulnerabilities, refer to the CVE pages listed in the related section of the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
