CVE-2026-18358

Name of the Vulnerable Software and Affected Versions gnome-remote-desktop as shipped in Red Hat Enterprise Linux (affected versions not specified)

Description A flaw exists when the daemon operates in system mode with RDP enabled. The incoming connection handler bypasses the connection throttler, which allows an unauthenticated remote attacker to establish numerous parallel pre-authentication connections to the RDP listener. This behavior leads to an accumulation of accepted sockets and pending routing-token operations until they timeout, resulting in resource exhaustion that prevents legitimate users from establishing RDP sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.