The vulnerability in neutrinolabs xrdp (CVE-2026-44178) is a heap-based buffer overflow in the virtual channel forwarding component. The xrdp process uses a fixed-size buffer without proper bounds checking when forwarding data from a remote client to the internal channel server. An authenticated attacker can exploit this by sending an oversized virtual channel message, resulting in heap corruption that may cause denial of service or arbitrary code execution under the xrdp process's privileges. The flaw affects versions up to and including 0.10.6 and has been fixed in version 0.10.6.1.

Successful exploitation allows an authenticated remote attacker to cause denial of service or execute arbitrary code with the privileges of the xrdp process. This can compromise the affected system's confidentiality, integrity, and availability.

Upgrade xrdp to version 0.10.6.1 or later, where this vulnerability has been fixed. No official patch or temporary fix is indicated other than upgrading. Until upgraded, restrict access to trusted users only, as exploitation requires authentication.