CVE-2026-121400

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2

Description A denial-of-service issue exists in the rdg process control packet() function. A malicious RD Gateway can exhaust the client CPU by sending an incomplete keepalive control packet. After completing the RDG tunnel-open exchange, an attacker sends an eight-byte header with the packetLength variable set to 0xFFFF and withholds the body. This triggers an unbounded no-progress read loop, causing a single client thread to consume full CPU resources.

Recommendations Update to version 3.32.2 or later.