The vulnerability in neutrinolabs xrdp (CVE-2026-32107) stems from improper checking of errors during the privilege drop process in the session execution component in versions before 0.10.6. This improper privilege management (CWE-273) could be exploited by an authenticated local attacker to escalate privileges to root and execute arbitrary code on the affected system. The CVSS 3.1 score is 8.8 (high), reflecting local attack vector with low complexity, requiring privileges but no user interaction, and resulting in high confidentiality, integrity, and availability impacts. The issue was addressed and fixed in xrdp version 0.10.6.

An authenticated local attacker on a vulnerable system could escalate privileges to root and execute arbitrary code, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability at a high level. No known exploits are reported in the wild at this time.

Upgrade neutrinolabs xrdp to version 0.10.6 or later, where this vulnerability has been fixed. Since the vendor advisory confirms the fix in 0.10.6, applying this update fully mitigates the issue. No additional mitigations are indicated.