PT-2026-114152

CVE-2026-110838

Published

2026-10-14

Updated

2026-11-03

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0

Description The shadow server dispatches input Protocol Data Units (PDUs) during the Confirm Active state before authentication is completed. This allows unauthenticated attackers to inject synthetic keyboard input into the host user's X11 session via XTEST by negotiating TLS-only RDP and sending an input PDU without the Confirm Active state.

Recommendations Update FreeRDP to version 3.32.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products