Red Hat Security AdvisoryRHSA-2026:73979
freerdp security update
Released 2026-10-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) freerdp-2:3.10.3-12.el10_2.13, freerdp-libs-2:3.10.3-12.el10_2.13, libwinpr-2:3.10.3-12.el10_2.13
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) freerdp-devel-2:3.10.3-12.el10_2.13, freerdp-server-2:3.10.3-12.el10_2.13, libwinpr-devel-2:3.10.3-12.el10_2.13
Fixes 1 record
Priority MEDIUM 46
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00578 · Published 2026-09-15 · Fixed in 3.31.0 CWE-693
