CVE-2026-67295

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP). This vulnerability allows a malicious RDP server to bypass security checks during drive redirection. By sending specially crafted paths, the server can access, read, write, delete, and list files in directories outside the intended shared folder on the client's system. This could lead to unauthorized access and manipulation of sensitive data.

This issue is classified as Moderate severity because exploitation requires a user to connect to a malicious or compromised RDP server with drive redirection enabled, allowing the server to bypass directory boundary checks to read, modify, or delete files outside the shared folder on the client system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, disable drive redirection when connecting to untrusted RDP servers. This can typically be configured within the FreeRDP client settings or by avoiding the use of the /drive or /home-drive options when initiating an RDP session. Disabling drive redirection prevents the server from manipulating local file paths.