CVE-2025-68670CWE-121

xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

Critical · published January 27, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

🚨 A sneaky stack-based buffer overflow is lurking in xrdp before version 0.10.5! This flaw can let attackers run amok on your system — and it all starts with a user domain connection! 🔥 Think of it like an unguarded package delivery where someone can tamper with the contents before it ever reaches its destination. If the delivery person doesn’t check the address properly, they could end up redirecting the package to the wrong place, causing all sorts of havoc! If an attacker exploits this vulnerability, they could execute arbitrary code as if they had full control of the target system! The implications are absolutely devastating – they could access sensitive information, install malicious software, or even take complete control of your machine. This is a critical situation that requires your immediate attention!

Put simply

Think of it like an unguarded package delivery where someone can tamper with the contents before it ever reaches its destination. If the delivery person doesn’t check the address properly, they could end up redirecting the package to the wrong place, causing all sorts of havoc! This vulnerability arises from improper bounds checking when processing user domain information during the connection sequence, allowing remote attackers to overwrite the stack buffer and redirect execution flow. It’s a serious oversight in a crucial part of the connection process!

What to do

If an attacker exploits this vulnerability, they could execute arbitrary code as if they had full control of the target system! The implications are absolutely devastating – they could access sensitive information, install malicious software, or even take complete control of your machine. This is a critical situation that requires your immediate attention! Upgrade xrdp to version 0.10.5 immediately to patch this vulnerability. Additionally, avoid relying on stack canary protection in production systems as a primary safeguard — better safe than sorry! You’ve got this! With these steps, you’ll secure your system in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01391 · 72.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-01-27T15:52Z
EPSS history
Timeline
  • 27 JAN 15:52Z
    xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
    cvelistv5