Cyber Resilience

CVE-2026-33145

Command Injection in Neutrinolabs Xrdp ≤ 0.10.6

Published
17 April 2026
Modified
27 April 2026
Patch / advisory
CVSS Score v3.1 6.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0036 28th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-33145 is a medium-severity OS Command Injection (CWE-78) vulnerability in Neutrinolabs Xrdp. Its CVSS base score is 6.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 28th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and SI-2 (Flaw Remediation) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled (which is…

more

the default when not explicitly configured), xrdp accepts a client-supplied AlternateShell value and executes it via /bin/sh -c during session initialization. This results in shell-interpreted execution of unsanitized, user-controlled input. This behavior effectively provides a scriptable remote command execution primitive over RDP within the security context of the authenticated user, occurring prior to normal window manager startup. This can bypass expected session initialization flows and operational assumptions that restrict execution to interactive desktop environments. This issue has been fixed in version 0.10.6.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
Why these techniques?

Authenticated remote command injection via unsanitized AlternateShell passed to /bin/sh -c enables T1190 (public-facing RDP server exploitation) and T1059.004 (Unix shell command execution).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-44978Same product: Neutrinolabs Xrdp
CVE-2026-41521Same product: Neutrinolabs Xrdp
CVE-2026-41252Same product: Neutrinolabs Xrdp
CVE-2026-55645Same product: Neutrinolabs Xrdp
CVE-2026-55238Same product: Neutrinolabs Xrdp
CVE-2026-32623Same product: Neutrinolabs Xrdp
CVE-2026-32624Same product: Neutrinolabs Xrdp
CVE-2026-54538Same product: Neutrinolabs Xrdp
CVE-2026-33516Same product: Neutrinolabs Xrdp
CVE-2026-44178Same product: Neutrinolabs Xrdp

Affected Assets

neutrinolabs
xrdp
≤ 0.10.6

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-2 Flaw Remediation
  • SI-10 Information Input Validation
  • CM-7 Least Functionality
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V1.2.5
  • V1.2.8
  • V15.2.5

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires applying the vendor patch (0.10.6) that eliminates the unsafe AlternateShell handling.

prevent

Mandates validation and sanitization of the client-supplied AlternateShell value before it is passed to /bin/sh -c, blocking CWE-78 injection.

prevent

Requires disabling non-essential functionality such as AllowAlternateShell when it is not explicitly needed, removing the code path that accepts unsanitized input.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

PR.PS-06's SDLC practices directly require secure coding and input handling that blocks command-injection defects, yet the single broad outcome leaves many specific neutralization vectors and verification gaps unaddressed.

PR.PS-02 partial match
prevents

Routine patching/maintenance can remediate known command-injection CVEs in dependencies (partial forward) but does nothing to stop developers from introducing improper neutralization in custom code (none reverse).

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing and code review target insecure use of operating-system command interfaces, catching command-injection flaws introduced during development.

References