Security Vulnerability in gnome-remote-desktop: Unauthenticated Denial of Service Risk
Summary
ALSA-2026:54512: Moderate: gnome-remote-desktop security update. Affects gnome-remote-desktop versions < 49.3-4.el10_2. Fixed in 49.3-4.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GNOME Remote Desktop is a service designed for remote desktop access and screen sharing within the GNOME desktop environment. It allows users to connect to their desktops remotely, facilitating collaboration and support. However, a recent security issue has been identified in the system-mode RDP server of gnome-remote-desktop, which lacks proper connection throttling, making it susceptible to denial of service attacks.
Vulnerability Detail
The vulnerability identified as CVE-2026-18358 affects the gnome-remote-desktop package by allowing unauthenticated users to overwhelm the server with connection requests. This can lead to a denial of service, where legitimate users are unable to connect to the remote desktop service. The absence of connection throttling means that the server does not limit the number of simultaneous connections, making it easy for an attacker to exploit this weakness.
How To Fix
Minimum fixed version
49.3-4.el10_2
This is the first release that contains the fix.
sudo dnf update gnome-remote-desktopTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit access to the gnome-remote-desktop service by configuring your firewall to restrict incoming connections or by disabling the service until the update is applied.
Conclusion
The gnome-remote-desktop package has a significant vulnerability that could allow unauthorized denial of service attacks. It is crucial for users to update to the patched version to safeguard their systems. Temporary workarounds can be employed until the update is applied. Monitoring tools like Vulert can assist in identifying such vulnerabilities in the future.
See every vulnerability recorded for gnome-remote-desktop →
FAQ
CVE-2026-18358 is the identifier for the security vulnerability in gnome-remote-desktop that allows unauthenticated denial of service attacks.
Users may experience an inability to connect to their remote desktop sessions due to the server being overwhelmed by connection requests from attackers.
You can implement firewall rules to restrict access to the gnome-remote-desktop service as a temporary workaround.
Yes, you can use tools like Vulert, which monitors open-source vulnerabilities in your software using a manifest file. You can check your application for vulnerabilities without needing to install any software.
For more details, you can refer to the CVE page associated with CVE-2026-18358, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for gnome-remote-desktop.
