Critical Security Vulnerability in FreeRDP: Update Required
Summary
RHSA-2026:76755: Red Hat Security Advisory: freerdp security update. Affects freerdp versions < 2:2.11.7-7.el9_8.8. Fixed in 2:2.11.7-7.el9_8.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote desktops and applications. It is widely used in various environments for remote access and management. The recent vulnerabilities identified in FreeRDP could potentially expose systems to unauthorized access and data breaches, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerabilities identified in FreeRDP, including CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, and CVE-2026-91964, stem from improper handling of certain inputs and lack of adequate validation. These flaws could allow an attacker to execute arbitrary code, leading to unauthorized access to sensitive data and system resources. The CVSS score of this vulnerability is 8.8, indicating a high severity level, which underscores the urgency for users to address these issues promptly.
How To Fix
Minimum fixed version
2:2.11.7-7.el9_8.8
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the FreeRDP service or implementing network-level security measures to limit exposure until the update can be applied.
Conclusion
The identified vulnerabilities in FreeRDP pose significant risks to users and systems. It is crucial to update to the latest patched version to safeguard against potential exploits. Users should remain vigilant and consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), enabling users to connect to remote desktops and applications.
Failing to update FreeRDP may leave systems vulnerable to exploitation, potentially allowing unauthorized access and data breaches.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
If you cannot update immediately, consider implementing network-level security measures to restrict access to the FreeRDP service.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
