Live › vulnerability › CVE-2026-121409
FreeRDP before 3.32.2 crashes when a malicious server or unauthenticated peer sends an oversized X.224 routing token in a Server Redirection PDU or to a FixedTarget freerdp-proxy. The crash stops the client or proxy process, which is a denial of service with no code execution stated in the sources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Teams that run FreeRDP clients, or freerdp-proxy in FixedTarget mode, and accept connections from servers or peers they do not fully trust. The sources describe a crash (denial of service), not code execution. Teams that only use FreeRDP against trusted servers on closed networks are less exposed.
No product ranges from the sources yet.
xfreerdp --version, and compare it to 3.32.2.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or proxies via oversized X.224 routing tokens. Attackers can send an oversized LoadBalanceInfo in a Server Redirection PDU, or a 240–247 byte token to a FixedTarget freerdp-proxy, triggering a tpdu_write_header assertion that crashes the process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121409")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.