DEBIAN-CVE-2026-121392: Critical severity debian/freerdp2 vulnerability
FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tlsverifycertificate() that accepts Common Name fallback despite non-matching SAN entries and matches IP literals against DNS strings. Man-in-the-middle attackers holding a certificate from a client-trusted CA can bypass server identity checks to intercept RDP sessions, including keystrokes, clipboard, and screen content.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Which Debian packages should be prioritized for review?
The affected software entries are debian/freerdp3 and debian/freerdp2. FreeRDP releases before 3.32.2 are described as vulnerable.
What does an attacker need to exploit this issue?
The attacker must be able to perform a man-in-the-middle attack and possess a certificate issued by a CA trusted by the client. No client-side privileges or user interaction are listed as requirements.
What could an attacker access if exploitation succeeds?
An attacker can intercept RDP sessions and access keystrokes, clipboard contents, and screen content. The issue affects server identity validation rather than RDP authentication itself.