CVE-2026-55238

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description An issue exists during the capability negotiation phase when processing RDP Confirm Active PDU. The parser fails to perform sufficient length validation for specific capability sets. A remote, unauthenticated attacker can send a specially crafted RDP packet with malformed capability data to trigger out-of-bounds memory reads. This can lead to a Denial of Service (DoS) by terminating the process. Because the software typically forks a new process for each connection, a crash is unlikely to affect the entire service.

Recommendations Update to version 0.10.6.1.