Improper Check for Dropped Privileges in xrdp - CVE-2026-32107

Vulnerability identifier: #VU126463

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-32107

CWE-ID: CWE-273

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges to root and execute arbitrary code.

The vulnerability exists due to improper check for dropped privileges in the session execution component when handling an error during the privilege drop process. A local user can trigger the flawed privilege drop handling to escalate privileges to root and execute arbitrary code.

Exploitation requires an additional exploit to facilitate the attack.

xrdp
Debian Linux
Fedora
Anolis OS
xrdp (Debian package)
xrdp
xrdp-devel
xrdp-selinux
xrdp-doc

Install security update from vendor's website.

xrdp - update to 0.10.6
xrdp (Debian package) - update to 0.10.1-3.1+deb13u2
xrdp - update to 0.10.6-1
xrdp-devel - update to 0.10.6-1
xrdp-selinux - update to 0.10.6-1
xrdp-doc - update to 0.10.6-1
xrdp - addressed in versions 0.10.6-1.el8, 0.10.6-1.el9, 0.10.6-1.fc42, 0.10.6-1.fc43, 0.10.6-1.fc44

• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-p5m6-7m43-pjv9

• Multiple vulnerabilities in xrdp
• Fedora EPEL 9 update for xrdp
• Fedora 44 update for xrdp
• Fedora EPEL 8 update for xrdp
• Fedora 42 update for xrdp
• Fedora 43 update for xrdp
• Anolis OS update for xrdp
• Debian update for xrdp