Live › vulnerability › CVE-2026-121401
FreeRDP's RD Gateway code dispatches an extended-auth packet without checking the negotiated mode or auth context. A malicious or compromised RD Gateway can send that packet before tunnel authentication, causing a null-pointer dereference that crashes the client.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Only FreeRDP clients that connect through an RD Gateway are exposed, and the trigger is the gateway sending the packet, so the risk depends on trusting that gateway. Teams that connect directly without a gateway and teams already on 3.32.2 or later are not affected. The sources describe a denial of service (client crash), not code execution.
No product ranges from the sources yet.
xfreerdp /version or your package manager's version query.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a null-pointer dereference that crashes the client.
This page as .md · .json · in your agent: get_signal("CVE-2026-121401")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.