CVE-2026-121392

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2

Description An improper certificate validation issue exists in the tls verify certificate() function. The system incorrectly accepts Common Name fallback when Subject Alternative Name (SAN) entries do not match and improperly matches IP literals against DNS strings. A man-in-the-middle attacker possessing a certificate from a client-trusted Certificate Authority (CA) can bypass server identity checks to impersonate the server and intercept RDP sessions, potentially capturing keystrokes, clipboard data, and screen content.

Recommendations Update to version 3.32.2.