Critical Security Vulnerability in FreeRDP: Red Hat Security Advisory RHSA-2026:76747
Summary
RHSA-2026:76747: Red Hat Security Advisory: freerdp security update. Affects freerdp versions < 2:2.11.7-14.el8_10. Fixed in 2:2.11.7-14.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), which allows users to connect to remote computers over a network. It is widely used in various environments for remote access and management. The package is essential for enabling remote desktop functionalities in Red Hat Enterprise Linux 8. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing FreeRDP.
Vulnerability Detail
The vulnerabilities identified in FreeRDP, documented under multiple CVEs (CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964), stem from flaws in the handling of RDP sessions. These vulnerabilities could allow an attacker to execute arbitrary code, leading to unauthorized access, data breaches, or denial of service. The CVSS score of 8.8 indicates a high severity level, emphasizing the critical nature of these vulnerabilities and the urgent need for remediation.
How To Fix
Minimum fixed version
2:2.11.7-14.el8_10
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users may consider disabling remote desktop access until the patch is applied. This can be done by modifying the firewall settings to block RDP traffic or by removing the FreeRDP package until an update is performed.
Conclusion
The vulnerabilities in FreeRDP pose significant risks to systems utilizing this package for remote desktop access. It is crucial to apply the necessary updates to mitigate these risks. Users are encouraged to stay informed about vulnerabilities and utilize tools like Vulert to monitor their applications for potential threats.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote systems.
The vulnerabilities could lead to arbitrary code execution, unauthorized access, and potential data breaches.
You can use Vulert's playground at Vulert Scanner to check for vulnerabilities in your application without needing to sign up.
Consider disabling remote desktop access as a temporary workaround until the patch can be applied.
The CVSS score for this vulnerability is 8.8, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
