Critical Security Flaw in FreeRDP: Arbitrary Code Execution and Denial of Service Vulnerabilities
Summary
ALSA-2026:54487: Important: freerdp security update. Affects freerdp versions < 2:2.11.7-7.el9_8.5. Fixed in 2:2.11.7-7.el9_8.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote servers, including Microsoft Windows machines and VirtualBox. It is widely used for remote access and management of systems. However, recent vulnerabilities have been identified that could allow attackers to execute arbitrary code or cause denial of service, posing significant risks to users and systems relying on this software.
Vulnerability Detail
The vulnerabilities in FreeRDP stem from improper handling of RDP files and messages. Specifically, CVE-2026-64624 allows for arbitrary code execution via malicious RDP files, while CVE-2026-67299 can lead to denial of service through crafted WindowIcon async messages. Additionally, CVE-2026-67289 exposes the system to HTTP Proxy Request Injection via redirection, and CVE-2026-68580 involves remote code execution or denial of service due to an audio input integer overflow. These vulnerabilities can be exploited by attackers to gain unauthorized access or disrupt services.
How To Fix
Minimum fixed version
2:2.11.7-7.el9_8.5
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the FreeRDP client and avoid opening untrusted RDP files until the update is applied. Additionally, users should monitor their systems for any unusual activity that may indicate exploitation attempts.
Conclusion
The vulnerabilities in FreeRDP present serious risks, including arbitrary code execution and denial of service. Users are strongly advised to update their installations to the latest patched version to mitigate these risks. By staying informed and proactive, users can protect their systems from potential exploitation.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote desktops and servers.
The main vulnerabilities include arbitrary code execution, denial of service, HTTP Proxy Request Injection, and audio input integer overflow.
You can use Vulert, which monitors open-source vulnerabilities in your software by analyzing the manifest file. Visit Vulert Scanner to check for vulnerabilities without needing to sign up.
If you cannot update immediately, limit access to the FreeRDP client and avoid using untrusted RDP files until the vulnerabilities are patched.
More information can be found on the CVE pages listed in the advisory, which detail the impact and technical aspects of each vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
