# CVE-2026-109832: GNOME Remote Desktop VNC TLS denial of service

Source: https://junglewise.ai/threats/cve-2026-109832-a-flaw-was-found-in-gnome-remote-desktop-as-shipped-in-red-hat  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-109832 · Severity: high · CVSS 7.5 · Published 2026-10-13

GNOME Remote Desktop is a tool that allows secure remote access to Linux desktops via VNC. When the VNC service is enabled with TLS encryption, a network attacker can trigger an unbounded busy loop that consumes CPU and halts the remote desktop thread, preventing legitimate users from connecting or controlling the system.

Technologies: [Red Hat GNOME Remote Desktop](https://junglewise.ai/threats/technologies/gnome-remote-desktop). Vendors: [Red Hat](https://junglewise.ai/threats/vendors/red-hat).

## Quick answers

**Is CVE-2026-109832 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-109832 being exploited in the wild.

**How severe is CVE-2026-109832?** High severity, with a CVSS score of 7.5, published 13 October 2026.

**Which products and versions are affected?** Red Hat GNOME Remote Desktop 0.1.6-1 through 40.0-11.

**Is there a fix for CVE-2026-109832?** No fixed version is recorded yet. If VNC is not required, disable the gnome-remote-desktop VNC service. If it must remain enabled, restrict the VNC listener to trusted hosts or management networks using host-based firewall rules. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-109832 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-109832?** Check whether you run Red Hat GNOME Remote Desktop at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


If VNC is not required, disable the gnome-remote-desktop VNC service. If it must remain enabled, restrict the VNC listener to trusted hosts or management networks using host-based firewall rules.

## Technical details

The vulnerability is an infinite loop (CWE-835) in the VNC TLS I/O handlers that occurs when GnuTLS returns retryable error codes (GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED). Instead of yielding to the event loop, the code spins indefinitely, consuming CPU resources with no forward progress. A remote, unauthenticated attacker who can reach the VNC listener can exploit this without privileges or user interaction.

## Affected products

- Red Hat GNOME Remote Desktop 0.1.6-1 through 40.0-11

## Timeline

- 2026-10-13: disclosed

## References

- [https://access.redhat.com/downloads/content/package-browser/](https://access.redhat.com/downloads/content/package-browser/)
- [https://access.redhat.com/security/cve/CVE-2026-109832](https://access.redhat.com/security/cve/CVE-2026-109832)

## Related threats

- [GNOME Remote Desktop out-of-bounds write in VNC TLS buffer handling](https://junglewise.ai/threats/cve-2026-109833-a-flaw-was-found-in-gnome-remote-desktop-as-shipped-in-red-hat)
- [Red Hat Enterprise Linux gnome-remote-desktop DoS in system-mode RDP](https://junglewise.ai/threats/cve-2026-18358-red-hat-enterprise-linux-gnome-remote-desktop-dos-in-system-mode)