CVE-2026-55626: xrdp: No authentication required with Xvnc backend on RHEL 9
xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this vulnerability to bypass intended session isolation, allowing them to unauthorizedly view or control the active desktop sessions of other users on the same system. Users using other backends, such as xorgxrdp or Xvnc over TCP sockets, are not affected. This issue has been fixed in version 0.10.6.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
xrdpto a version that resolves this vulnerability.Fixed in 0.10.6.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55626?
The severity of CVE-2026-55626 is rated as high with a score of 8.
How do I fix CVE-2026-55626?
To fix CVE-2026-55626, upgrade to xrdp version 0.10.6.1 or later.
What type of attack does CVE-2026-55626 enable?
CVE-2026-55626 allows a local authenticated attacker to exploit insufficient authentication with the Xvnc backend.
Which versions of xrdp are affected by CVE-2026-55626?
xrdp versions 0.10.6 and prior are affected by CVE-2026-55626.
What component of xrdp is impacted by CVE-2026-55626?
CVE-2026-55626 impacts the Xvnc backend of the xrdp server.