Live › vulnerability › CVE-2026-121400
FreeRDP before 3.32.2 mishandles an incomplete keepalive control packet from a Remote Desktop Gateway. A malicious gateway can hold a client thread in an endless read loop that consumes a full CPU core, causing denial of service on the client.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Client machines running FreeRDP before 3.32.2 that connect through an RD Gateway, where the gateway may be untrusted or attacker-controlled. The sources say the attacker must complete the RDG tunnel-open exchange first, so exposure depends on connecting to a hostile gateway. Servers and clients that never use an RD Gateway are not described as affected.
No product ranges from the sources yet.
xfreerdp /version.3.32.2 in packaged apps or bundled libraries.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious RD Gateway to exhaust client CPU by sending an incomplete keepalive control packet. Attackers completing the RDG tunnel-open exchange then send an eight-byte header with packetLength 0xFFFF and withhold the body, causing an unbounded no-progress read loop that spins one client thread at full CPU.
This page as .md · .json · in your agent: get_signal("CVE-2026-121400")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.