Vulnerability in Freerdp
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.004 (34.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 34th percentile — 34.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.002
Affected products
- Freerdp — versions < 3.24.2
Weakness classification (CWE)
References
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93 (Exploit, Patch, Mitigation, Vendor Advisory)
- github.com/FreeRDP/FreeRDP/commit/4ac0b6467d371a1ad47c1f751c5b305e4c068adb (Patch)
Frequently asked questions
- What is CVE-2026-33952?
- CVE-2026-33952 is a medium-severity vulnerability in Freerdp, classified under Reachable Assertion. CVSS score: 6.5/10. Published 2026-03-30.
- How severe is CVE-2026-33952?
- Medium severity. CVSS v3 base score is 6.5 out of 10.