neutrinolabs xrdp up to 0.10.6 virtual channel forwarding mechanism buffer overflow

Summaryinfo

A vulnerability was found in neutrinolabs xrdp up to 0.10.6. It has been declared as very critical. This vulnerability affects unknown code of the component virtual channel forwarding mechanism. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026-44178. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in neutrinolabs xrdp up to 0.10.6. It has been declared as very critical. This vulnerability affects some unknown processing of the component virtual channel forwarding mechanism. The manipulation with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate bounds checking on the incoming payload. An authenticated remote attacker can exploit this flaw by sending a specially crafted virtual channel message that exceeds the buffer capacity, leading to heap memory corruption. This may result in a denial of service or the execution of arbitrary code with the privileges of the xrdp process. This issue has been fixed in version 0.10.6.1.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-44178 since 05/05/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 07/20/2026).

Upgrading to version 0.10.6.1 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• neutrinolabs

Name

• xrdp

Version

• 0.10.0
• 0.10.1
• 0.10.2
• 0.10.3
• 0.10.4
• 0.10.5
• 0.10.6

Website

• Product: https://github.com/neutrinolabs/xrdp/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion