CVE-2026-40033

A flaw was found in FreeRDP.If a user connects to a malicious Remote Desktop (RDP) server, a security flaw in FreeRDP could cause the application to crash or allow the server to run unauthorized code on the user's system.

This vulnerability in FreeRDP could allow a malicious Remote Desktop server to run unauthorized code or crash the connecting user's system. Red Hat users are only at risk if they use the FreeRDP client to connect to an untrusted or compromised server.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid connecting to untrusted or unknown Remote Desktop Protocol (RDP) servers. Restricting FreeRDP client usage to only known and trusted RDP servers can reduce the risk of exploitation.