CVE-2026-121396
Undergoing Analysis Undergoing Analysis - In Progress

FreeRDP Client Assertion Failure via Malformed RTS Padding

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: VulnCheck

Description
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-121396
EUVD
EUVD-2026-115928

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FreeRDP FreeRDP 3.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects FreeRDP clients from versions 3.0.0 to 3.32.1. It involves a reachable assertion in the rts_read_auth_verifier function triggered by malformed RTS padding in RPC-over-HTTP RTS PDUs. Attackers controlling an RD Gateway can send crafted packets to crash the client process.

Impact Analysis

If you use a vulnerable FreeRDP client, an attacker could crash your application by sending malicious packets through a compromised RD Gateway. This could lead to denial of service or potential unauthorized access if combined with other exploits.

Mitigation Strategies

Upgrade FreeRDP clients to version 3.32.2 or later to address the reachable assertion in rts_read_auth_verifier.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121396. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...