Debian/xrdp: medium 6.3
xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp
Action: Upgrade xrdp to 0.10.1-3.1+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.1-3.1+deb13u2 | - |
Fixed versions
| 0.10.1-3.1+deb13u2 |
Sources
- osv: DEBIAN-CVE-2026-33145#Debian:13/xrdp
- https://security-tracker.debian.org/tracker/CVE-2026-33145
published · modified · JSON