CVE-2026-109952

A flaw was found in FreeRDP. A remote attacker, acting as a malicious server or an on-path attacker, can exploit this flaw to cause information disclosure by intercepting user credentials in cleartext. Due to missing validation during connection negotiation, the client accepts unapproved security protocols selected by the server, bypassing configured protections like Network Level Authentication (NLA). Consequently, the connection downgrades to a less secure protocol and transmits the user's password in plain text.

This flaw is rated Moderate because algorithm downgrade/selection weakness may allow disclosure under complex conditions (AC:H) when connecting to a malicious peer (UI:R).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict FreeRDP clients to trusted RDP servers and networks.