Description
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed, wrong-hostname certificate to impersonate the RDP target and receive proxied session data.
Published: 2026-10-21
Score: 7.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Untrusted TLS Certificate Acceptance
Action: Patch Now
AI Analysis

Impact

FreeRDP versions 2.0.0 before 3.32.0 contain a flaw in the proxy component where TLS certificates are not properly validated when no verification module is configured. Attackers can present self‑signed or host‑name‑mismatched certificates, allowing them to impersonate the RDP target. This enables an attacker to intercept or modify the proxied RDP session, compromising confidentiality and integrity of the traffic.

Affected Systems

The vulnerability affects the FreeRDP project, specifically the freerdp binary from version 2.0.0 up to 3.31.x. All builds that lack a verification module for TLS in the proxy are susceptible.

Risk and Exploitability

The CVSS score of 7.6 indicates high severity, but the EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a network‑positioned attacker able to intercept the proxy's outbound TLS connection and supply a fabricated certificate. The weakness is classified as CWE‑295, reflecting a failure in certificate validation.

Generated by OpenCVE AI on October 21, 2026 at 16:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade FreeRDP to version 3.32.0 or later to obtain the certificate verification fix.
  • If upgrading is not feasible, enable and configure a TLS certificate verification module for the proxy to enforce proper validation of target certificates.
  • Restrict the proxy’s outbound connections to trusted hosts and employ network segmentation to limit attackers’ ability to intercept TLS traffic.

Generated by OpenCVE AI on October 21, 2026 at 16:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 21 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed, wrong-hostname certificate to impersonate the RDP target and receive proxied session data.
Title FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation
First Time appeared Freerdp
Freerdp freerdp
Weaknesses CWE-295
CPEs cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*
Vendors & Products Freerdp
Freerdp freerdp
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N'}

cvssV4_0

{'score': 7.6, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Freerdp Freerdp
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-22T18:18:48.176Z

Reserved: 2026-10-20T21:41:06.180Z

Link: CVE-2026-114047

cve-icon Vulnrichment

Updated: 2026-10-22T18:18:41.644Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-21T01:17:27.230

Modified: 2026-10-22T19:17:36.657

Link: CVE-2026-114047

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-21T00:36:25Z

Links: CVE-2026-114047 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T12:15:05Z

Weaknesses
  • CWE-295

    Improper Certificate Validation