CVE-2026-55639
Received Received - Intake

Memory Disclosure in xrdp RDP Server

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed data. Due to missing bounds checks, the xrdp process may read a small number of bytes beyond the declared data block boundary, potentially disclosing process memory contents that could be combined with other vulnerabilities. This issue has been fixed in version 0.10.6.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-55639
EUVD
EUVD-2026-46042

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
neutrinolabs xrdp to 0.10.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55639 is an out-of-bounds read vulnerability in xrdp versions up to 0.10.6. It occurs during the initial RDP connection phase when parsing Client Security Data in the Client MCS Connect Initial PDU. The parser fails to validate the length of incoming data blocks, allowing a remote attacker to send a malformed packet. This can cause the xrdp process to read a small amount of memory beyond the intended data block, potentially exposing sensitive process memory contents.

Detection Guidance

To detect this vulnerability, check the version of xrdp running on your system. If it is version 0.10.6 or earlier, the system is vulnerable. Use commands like 'xrdp --version' or 'dpkg -l | grep xrdp' (for Debian-based systems) to verify the installed version.

Impact Analysis

This vulnerability could allow a remote, unauthenticated attacker to read a small amount of process memory from the xrdp server. While it does not directly allow code execution or data modification, the exposed memory contents could contain sensitive information. This information might be used in combination with other vulnerabilities to further compromise the system.

Compliance Impact

This vulnerability could potentially lead to unauthorized disclosure of sensitive data, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Exposure of process memory could result in data breaches, triggering mandatory breach notification and compliance penalties depending on the affected data.

Mitigation Strategies

Immediately upgrade xrdp to version 0.10.6.1 or later. This patched version addresses the improper input validation flaw. If upgrading is not immediately possible, consider disabling the xrdp service until the update is applied to prevent potential exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55639. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart