PT-2026-61024 · Xrdp · Xrdp

CVE-2026-55626 · Published 2026-07-08 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description An issue exists when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, as the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker can exploit this to bypass session isolation and unauthorizedly view or control active desktop sessions of other users on the same system. This does not affect users of other backends, such as xorgxrdp, or those using Xvnc over TCP sockets.

Recommendations Update to version 0.10.6.1. As a temporary mitigation, avoid using the Xvnc backend over UNIX domain sockets.

Exploit

Fix

LPE

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2026-55626

GHSA-M3XX-CPC4-982R

Affected Products

Xrdp

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55626.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-55626 · Security Note
• https://ubuntu.com/security/CVE-2026-55626 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-55626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-55626 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-55626 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-55626 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-55626 · Vendor Advisory
• https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 · Note
• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-m3xx-cpc4-982r · Note
• https://twitter.com/VulmonFeeds/status/2079365939800281545 · Twitter Post