FreeRDP 3.33 Puts a Remote Desktop in the Browser
FreeRDP 3.33, the latest release of the open-source implementation of Microsoft’s Remote Desktop Protocol, now includes WebAssembly support that lets the client run directly inside a web browser. The release also arrives with what its developers describe as a huge influx of pull requests and bug reports tied to AI and large language model activity, and with 13 known security fixes included.
Here’s what it means in plain terms: the software that lets you see and control a distant computer no longer needs to be installed as a separate program. It can load as a web page.
How the Browser Version Works
The WebAssembly build was made with Emscripten, a toolchain that compiles code written in languages like C into a format browsers can execute at near-native speed. Think of it like a universal adapter: the same FreeRDP code that normally runs as a desktop application gets translated into something Chrome, Firefox or Safari can run without extra plugins.
Video and sound are handled through browser-native interfaces. The implementation uses WebCodecs for H.264 and AV1 video decoding, and Web Audio backends for sound playback and microphone input. Clipboard integration with the browser is supported too, so copying text between a local machine and a remote session works the way users expect.
The practical upshot for anyone building AI tooling: a remote desktop session can now be embedded in a web app, a dashboard or an internal portal without shipping a client installer to every user.
Why AI Developers Are Paying Attention
The release announcement points to a surge of contributions and feedback from AI and LLM activity, enough that the maintainers say they will follow up with a patch release to clear the backlog of minor bugs and regressions. That matters because AI agents that operate computers, often called computer-use or browser-use agents, need a reliable way to see a screen and send input to it. A browser-accessible RDP client gives those systems a standard, well-understood channel into remote machines.
FreeRDP 3.33 also adds experimental UDP support for direct RDP connections without an RD Gateway. Client-side UDP multitransport can be switched off with the /multitransport:tcp-only option when a TCP-only connection is preferred. Lower-latency transport is the kind of plumbing that makes interactive, automated sessions feel less sluggish.
Security Fixes and a Red Hat Patch
The 13 security fixes in FreeRDP 3.33 cover vulnerabilities documented in GitHub security advisories, alongside stability and reliability fixes affecting connection handling, authentication, graphics and device redirection. Separately, Red Hat released security updates for FreeRDP in Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life and AUS variants, addressing denial of service and remote code execution issues caused by heap buffer overflows, out-of-bounds reads, uninitialized heap memory disclosure and buffer over-reads. Those flaws affect the xfreerdp client and related components.
Threat Radar, which tracks vulnerability risk, rated the chance of exploitation in the next 30 days at 0.4 percent, higher than 40 percent of CVEs, and recorded no public exploit code, no known exploitation in the wild and no attack traffic observed. Red Hat’s guidance is to apply the official patches; no additional mitigation steps are indicated beyond the updates.
Smaller Fixes That Add Up
Away from the headline feature, the SDL client’s RemoteApp support got attention to window positioning, resizing, activation, popup handling and multiple-monitor setups, and RemoteApp functionality was added to the SDL client on Windows. The X11 client received keyboard handling fixes and a fix for a deadlock affecting RemoteApp window repainting. Unicode input through Unix-style named pipes now works across all clients on systems with mkfifo, and keyboard mapping stability under X11 is improved.
The release also restores experimental Windows shadow server support, adds macOS file copy and paste between Finder and remote systems without FUSE, and brings an Apple VideoToolbox H.264 decoder, better Android client responsiveness and automatic reconnection, improved audio handling, and the first infrastructure for translating application messages.
What It Means for Ordinary Users
Remote desktop software has traditionally meant installing a client, keeping it patched and hoping it plays nicely with whatever device you are on. Moving the client into the browser shifts that maintenance burden to the server side and widens the range of devices that can connect, including locked-down corporate laptops and tablets where installs are restricted. For the AI crowd, the more interesting shift is architectural: a remote session becomes something a web application, and therefore an automated agent, can open and drive directly.
The maintainers say a follow-up maintenance release is planned to address the papercuts and bugs still in the backlog. FreeRDP 3.33 is available now via GitHub.
Sources
- List of Remote Desktop Protocol clients
- FreeRDP 3.33 Released With WebAssembly Support, Huge Influx Of Activity Due To AI
- FreeRDP 3.33 Adds WebAssembly Support, Experimental UDP Connections
- Red Hat Security Advisory: freerdp security update | Threat Radar
Photo: Jeremy Bishop / Unsplash (Unsplash License)
