FreeRDP Vulnerabilities Allow Remote Code Execution, DoS

CERT-Bund has released security advisory WID-SEC-2026-0880 detailing multiple vulnerabilities in FreeRDP, an open-source implementation of the Remote Desktop Protocol. These vulnerabilities, with a CVSS Base Score of 7.5 (High) and Temporal Score of 6.5 (Medium), can be exploited by remote, anonymous attackers. Successful exploitation could lead to arbitrary code execution, denial-of-service, data manipulation, disclosure of confidential information, or other unspecified attacks.

This advisory impacts Fedora Linux and Open Source FreeRDP versions prior to 3.24.2, affecting systems running on UNIX and Windows operating systems. Organizations utilizing FreeRDP should prioritize updating to a patched version or implementing available mitigations to protect against potential exploitation. The advisory highlights the need for prompt vulnerability management for remote access software.