Skip to content
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception

CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception

First seen 3 Nov 2026, 16:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC
  • •CVE-2026-121392 in FreeRDP allows man-in-the-middle attacks via improper certificate validation.
  • •The vulnerability affects FreeRDP versions before 3.32.2 and has a CVSS score of 9.1.
  • •Organizations using FreeRDP for remote access are at high risk, especially on untrusted networks.

A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to intercept Remote Desktop Protocol (RDP) sessions. This vulnerability can lead to exposure of sensitive session content, including keystrokes and clipboard data. Organizations using FreeRDP for remote administration are particularly at risk, especially over untrusted networks. The CVE was published on November 3, 2026, with a CVSS score of 9.1, indicating a severity level. Immediate action is recommended to mitigate potential exploitation. Users are advised to upgrade to the fixed version or enforce strict certificate validation until an update can be applied.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-03
CVE-2026-121392 published
FreeRDP vulnerability disclosed, allowing man-in-the-middle attacks on RDP sessions.
Redpacketsecurity
2026-11-03
CVE-2026-121392 reported by Sploitus
Sploitus confirms the same vulnerability details, emphasizing the risk of session interception.
Sploitus

More articles in this cluster (4)

Following this threat?

Track CVE-2026-121392 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 3

Common questions

Which versions of FreeRDP are affected?
FreeRDP versions prior to 3.32.2 are affected by CVE-2026-121392.
What is the severity of this vulnerability?
CVE-2026-121392 has a CVSS score of 9.1, classified as critical.
What should organizations do to mitigate this risk?
Organizations should upgrade to FreeRDP version 3.32.2 or later and enforce strict certificate validation.