CVE-2026-73241

Received Received - Intake

Remote Code Execution in FreeRDP Server

Publication date: 2026-08-11

Last updated on: 2026-08-13

Assigner: GitHub, Inc.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS_TYPE_CAPABILITIES PDU while rdstls_server_authenticate is waiting for RDSTLS_TYPE_AUTHREQ, leaving resultCode at RDSTLS_RESULT_SUCCESS and allowing a remote unauthenticated client to bypass the RedirectionGuid, username, domain, or password checks. This issue is fixed in version 3.30.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-13

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-73241

EUVD

EUVD-2026-56934

Affected Vendors & Products

Vendor	Product	Version / Range
freerdp	freerdp	to 3.30.0 (exc)
freerdp	freerdp	3.30.0
freerdp	freerdp	3.27.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability in FreeRDP allows a remote unauthenticated attacker to bypass authentication checks by sending a malicious RDSTLS_TYPE_CAPABILITIES PDU during the server's authentication step. The server incorrectly accepts this PDU while waiting for a valid RDSTLS_TYPE_AUTHREQ, setting resultCode to success and skipping credential verification for RedirectionGuid, username, domain, or password.

Detection Guidance

To detect CVE-2026-73241, check FreeRDP server versions prior to 3.30.0. Use commands like 'freerdp /version' or inspect package versions on Linux (e.g., 'dpkg -l freerdp2-x11'). Monitor network traffic for unexpected RDSTLS PDU exchanges during authentication attempts.

Impact Analysis

An attacker could exploit this to gain unauthorized remote access to a FreeRDP server without valid credentials. This could lead to data theft, unauthorized system access, or further network compromise if the server is part of a larger infrastructure.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strong authentication controls for remote access, such as GDPR's data protection principles or HIPAA's access control safeguards. Unauthorized access risks data breaches, leading to potential regulatory penalties and loss of trust.

Mitigation Strategies

Update FreeRDP to version 3.30.0 or later to address the vulnerability. Disable RDSTLS security if updating is not immediately possible, though this is not recommended as a long-term solution.

Hi! I’m here to help you understand CVE-2026-73241. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70