Live › vulnerability › CVE-2026-121396
FreeRDP clients from 3.0.0 before 3.32.2, built with verbose WinPR assertions, crash when a connected RD Gateway sends a crafted RPC-over-HTTP packet with inconsistent authentication padding. An attacker controlling the gateway can abort the client process, which is a denial of service rather than code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Teams that connect to Windows machines through an RD Gateway with FreeRDP clients from 3.0.0 up to 3.32.2 built with verbose WinPR assertions. The exposure comes from a gateway the client trusts, so clients that connect only directly to hosts, or use other RDP clients, are not affected by this flaw.
No product ranges from the sources yet.
xfreerdp /version or the installed package version, and look for anything below 3.32.2.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121396")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.