CVE-2026-67293

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0

Description An improper certificate hostname validation issue exists where the TLS hostname matcher tls match hostname() in libfreerdp/crypto/tls.c incorrectly handles wildcard patterns. Specifically, a pattern like *.example.com is treated as matching any hostname ending in .example.com, allowing wildcard certificates to be accepted for multi-label subdomains such as a.b.example.com. This behavior weakens TLS server authentication.

Recommendations Update FreeRDP to version 3.29.0 or later.