Live › vulnerability › CVE-2026-121398
FreeRDP before 3.32.2 has a cross-thread use-after-free in the freerdp-proxy dyn-channel-dump module during session teardown. A malicious RDP target can send dynamic channel data while the front client disconnects, making the proxy process read freed memory and crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Teams that run freerdp-proxy in front of RDP targets they do not fully trust, especially with the dyn-channel-dump module in use. Direct RDP clients that never run the proxy component are not exposed through this flaw. The sources do not say whether the default build enables dyn-channel-dump.
No product ranges from the sources yet.
xfreerdp --version or your package manager.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during session teardown. A malicious RDP target can send dynamic channel data while the front client disconnects, letting the client thread read freed ChannelData and crash the proxy process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121398")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.