CVE-2026-33145Disclosure(neutrinolabs / xrdp)

LOWCVSS 6.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled (which is the default when not explicitly configured), xrdp accepts a client-supplied AlternateShell value and executes it via /bin/sh -c during session initialization. This results in shell-interpreted execution of unsanitized, user-controlled input. This behavior effectively provides a scriptable remote command execution primitive over RDP within the security context of the authenticated user, occurring prior to normal window manager startup. This can bypass expected session initialization flows and operational assumptions that restrict execution to interactive desktop environments. This issue has been fixed in version 0.10.6.

neutrinolabs CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6

Vendor / third-party advisories

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rmvv-7633-fg7h

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xrdp

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

neutrinolabs

Products

xrdp

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud176d
Disclosure
🚨*CVE* CVE-2026-33145 xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of th… https://www.cve.org/CVERecord?id=CVE-2026-33145 ----- Traducción: CVE-2026-33145 xrd… http://infoflow.cloud`
Post summary
The tweet announces a new CVE for xrdp, describing an authenticated remote command execution flaw, but provides no proof‑of‑concept, exploit, or mitigation details.
0000034
72 followersView on X
CVE@CVEnew176d
Disclosure
CVE-2026-33145 xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of th… https://www.cve.org/CVERecord?id=CVE-2026-33145
Post summary
The advisory reports an authenticated remote user command‑execution vulnerability in xrdp up to v0.10.5, without mentioning PoC, exploit code, or remediation steps.
00000167
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	neutrinolabs	xrdp	-	-	-

Explore more

Back to dashboard neutrinolabs CVEs xrdp vulnerabilities