CVE-2026-109953

A flaw was found in FreeRDP. When connecting using the restricted admin mode option, the client fails to suppress credential delegation, inadvertently transmitting administrative credentials in cleartext to the remote server. A compromised destination host or an on-path attacker can intercept these credentials, resulting in sensitive information disclosure and potential unauthorized administrative access.

This flaw is rated Moderate because insufficiently protected credentials/secrets may be exposed under non-default conditions (AC:H) after the user connects to a malicious peer (UI:R). Integrity and availability are not directly impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict FreeRDP clients to trusted RDP servers and networks.