Improper handling of exceptional conditions in FreeRDP - #VU146580

 

Improper handling of exceptional conditions in FreeRDP - #VU146580

Published: September 1, 2026


Vulnerability identifier: #VU146580
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-755
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass the configured transport security policy and disclose sensitive information.

The vulnerability exists due to improper handling of exceptional conditions in rdp_server_accept_nego() and protocol selection logic when processing an RDP negotiation failure followed by continued connection handling. A remote attacker can send an incompatible negotiation request and then continue the same connection to enter unintended RDSTLS processing to bypass the configured transport security policy and disclose sensitive information.

The issue is pre-authentication and can expose RDSTLS capabilities and related server-side parsers before the configured authentication mechanism runs.


Affected software

FreeRDP

Remediation

Install security update from vendor's website.

FreeRDP - update to 3.31.0

External References

Related Security Bulletins