Security Advisory

CVE-2026-73241

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-11 19:47:27

Last updated 2026-08-11 19:48:32

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS_TYPE_CAPABILITIES PDU while rdstls_server_authenticate is waiting for RDSTLS_TYPE_AUTHREQ, leaving resultCode at RDSTLS_RESULT_SUCCESS and allowing a remote unauthenticated client to bypass the RedirectionGuid, username, domain, or password checks. This issue is fixed in version 3.30.0.

← Browse all CVEs View on cve.org ↗