CVE-2026-73241

A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials.

An Important flaw in FreeRDP 3.0+ allows remote, unauthenticated attackers to bypass authentication and gain session access. This vulnerability only affects servers explicitly configured with the non-default RdstlsSecurity = TRUE setting. Because RDSTLS was introduced in version 3.0, RHEL 9 and older releases are completely unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not enable RDSTLS server authentication (RdstlsSecurity); it is disabled by default. If FreeRDP is deployed as an RDP server with RDSTLS enabled, disable RdstlsSecurity