UBUNTU-CVE-2026-121396: Medium severity ubuntu/freerdp vulnerability

Published Nov 3, 2026

Updated

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.

Affected Software

9 affected components

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp3*

ubuntu/freerdp2*

ubuntu/freerdp3*

Event History

Nov 3, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed?

FreeRDP clients in versions 3.0.0 through before 3.32.2 are affected only when built with verbose WinPR assertions. The issue is reachable when the client connects through an RD Gateway that supplies RPC-over-HTTP RTS traffic.

What does an attacker need to exploit this?

An attacker must control the RD Gateway used by the connecting client and send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding. Exploitation can abort the client process; the provided data does not indicate confidentiality or integrity impact.

How can I determine whether a client is affected?

Check whether the installed FreeRDP client is version 3.0.0 or later but earlier than 3.32.2, and whether it was built with verbose WinPR assertions enabled. Affected behavior is an assertion-triggered abort while processing malformed RTS authentication padding from an RD Gateway.

UBUNTU-CVE-2026-121396: Medium severity ubuntu/freerdp vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this?

How can I determine whether a client is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this?

How can I determine whether a client is affected?