Red Hat Security Advisory: freerdp security update
A security vulnerability (CVE-2026-55193) in FreeRDP, a free implementation of the Remote Desktop Protocol client, allows remote code execution or client crash via a malicious TS Gateway. This issue affects multiple versions of FreeRDP distributed by Red Hat and Ubuntu. The vulnerability has been rated with high severity by Red Hat Product Security. Patches are available from both Red Hat and Ubuntu to address this issue.
AI Analysis
Technical Summary
FreeRDP contains a security flaw identified as CVE-2026-55193 that enables remote code execution or causes the client to crash when interacting with a malicious Terminal Services (TS) Gateway. This vulnerability affects various versions of FreeRDP, including those packaged for Red Hat Enterprise Linux 9 and multiple Ubuntu releases. The flaw can be exploited by an attacker controlling a TS Gateway to compromise the client. Both Red Hat and Ubuntu have released security updates to fix this vulnerability.
Potential Impact
Exploitation of this vulnerability could allow an attacker to execute arbitrary code on the client machine or cause the FreeRDP client to crash, resulting in denial of service. This impacts the confidentiality, integrity, and availability of systems using vulnerable FreeRDP versions.
Mitigation Recommendations
Official patches are available from Red Hat and Ubuntu. Users should apply the provided security updates to FreeRDP packages as soon as possible to remediate this vulnerability. Standard system updates on affected distributions will include these fixes. No additional mitigation steps are indicated by the vendor advisories.
Red Hat Security Advisory: freerdp security update
Description
A security vulnerability (CVE-2026-55193) in FreeRDP, a free implementation of the Remote Desktop Protocol client, allows remote code execution or client crash via a malicious TS Gateway. This issue affects multiple versions of FreeRDP distributed by Red Hat and Ubuntu. The vulnerability has been rated with high severity by Red Hat Product Security. Patches are available from both Red Hat and Ubuntu to address this issue.
Affected software
pkg:deb/ubuntu/[email protected]~git20140921.1.440916e+dfsg1-5ubuntu1.4?arch=source&distro=xenialpkg:deb/ubuntu/[email protected]+dfsg1-0ubuntu0.18.04.4+esm6?arch=source&distro=esm-infra/bionicpkg:deb/ubuntu/[email protected]~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2?arch=source&distro=bionicpkg:deb/ubuntu/[email protected]+dfsg1-0ubuntu0.20.04.2+esm4?arch=source&distro=esm-infra/focalpkg:deb/ubuntu/[email protected]+dfsg1-3ubuntu2.11?arch=source&distro=jammypkg:deb/ubuntu/[email protected]+dfsg-0ubuntu0.24.04.1?arch=source&distro=noblepkg:deb/ubuntu/[email protected]+dfsg1-1ubuntu0.1~esm6?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/[email protected]+dfsg-2ubuntu0.5?arch=source&distro=questingpkg:deb/ubuntu/[email protected]+dfsg-0ubuntu0.26.04.1?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FreeRDP contains a security flaw identified as CVE-2026-55193 that enables remote code execution or causes the client to crash when interacting with a malicious Terminal Services (TS) Gateway. This vulnerability affects various versions of FreeRDP, including those packaged for Red Hat Enterprise Linux 9 and multiple Ubuntu releases. The flaw can be exploited by an attacker controlling a TS Gateway to compromise the client. Both Red Hat and Ubuntu have released security updates to fix this vulnerability.
Potential Impact
Exploitation of this vulnerability could allow an attacker to execute arbitrary code on the client machine or cause the FreeRDP client to crash, resulting in denial of service. This impacts the confidentiality, integrity, and availability of systems using vulnerable FreeRDP versions.
Mitigation Recommendations
Official patches are available from Red Hat and Ubuntu. Users should apply the provided security updates to FreeRDP packages as soon as possible to remediate this vulnerability. Standard system updates on affected distributions will include these fixes. No additional mitigation steps are indicated by the vendor advisories.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-55193
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:25.10","Ubuntu:26.04:LTS"]
Threat ID: 6a5e7a702a4a8d59899de951
Added to database: 07/20/2026, 19:43:44 UTC
Last enriched: 09/10/2026, 22:46:39 UTC
Last updated: 09/14/2026, 22:01:35 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.