Critical Remote Code Execution Vulnerability in FreeRDP Packages
Summary
ALSA-2026:66347: Important: freerdp security update. Affects freerdp versions < 2:2.11.7-7.el9_8.7. Fixed in 2:2.11.7-7.el9_8.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote desktops and servers, including Microsoft Windows machines and VirtualBox. It is widely used for remote access and management of systems. The recent vulnerability identified as CVE-2026-55193 poses a significant risk, enabling potential remote code execution or client crashes when interacting with malicious TS Gateways.
Vulnerability Detail
The vulnerability arises from improper handling of data received from a TS Gateway, which can lead to remote code execution or crashes in the xfreerdp client. This issue is particularly concerning as it can be exploited by an attacker to execute arbitrary code on the client system or disrupt the user's session, leading to unauthorized access or denial of service. The CVSS score for this vulnerability indicates a high severity, emphasizing the need for immediate attention.
How To Fix
Minimum fixed version
2:2.11.7-7.el9_8.7
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid connecting to untrusted TS Gateways until the update is applied. Additionally, restricting access to the FreeRDP client can help minimize exposure to potential attacks.
Conclusion
The FreeRDP vulnerability CVE-2026-55193 presents a serious risk to users, allowing for remote code execution or client crashes. It is crucial to update to the patched version to ensure security. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert, which can provide real-time alerts without requiring code access.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), enabling users to connect to remote desktops and servers.
CVE-2026-55193 refers to a critical vulnerability in FreeRDP that allows for remote code execution or client crashes via malicious TS Gateways.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, avoid connecting to untrusted TS Gateways and restrict access to the FreeRDP client as a temporary workaround.
Failing to address this vulnerability could lead to unauthorized access, data breaches, or service disruptions due to remote code execution or client crashes.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
