CVE-2026-110831

Undergoing Analysis Undergoing Analysis - In Progress

Resource Leak in FreeRDP via Drive Redirection

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulnCheck

Description

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with drive redirection enabled can send IRP_MJ_CREATE with AllocationSize set to UINT64_MAX, forcing the seek to fail and leaking the file object and operating-system handle until drive teardown.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110831

EUVD

EUVD-2026-101714

Affected Vendors & Products

Vendor	Product	Version / Range
FreeRDP	FreeRDP	3.13.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-775	The product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.

Attack-Flow Graph

Executive Summary

FreeRDP versions 3.13.0 to 3.32.0 have a flaw where a malicious RDP server can exploit drive redirection by sending a specific request (IRP_MJ_CREATE with AllocationSize set to UINT64_MAX). This causes the client to fail in allocating space for a local file, leaving the file object and OS handle open until the drive is disconnected, leading to resource leaks.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected file handle leaks in FreeRDP clients with drive redirection enabled. Check for processes holding excessive file descriptors or handles after RDP sessions. Use tools like lsof, netstat, or Windows Resource Monitor to inspect file objects and handles. Ensure FreeRDP is updated to version 3.32.0 or later.

Impact Analysis

If you use FreeRDP with drive redirection enabled and connect to an untrusted RDP server, the server could exploit this flaw to leak file handles and operating-system resources on your system. This may cause performance issues or crashes due to resource exhaustion.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it involves a resource retention flaw in FreeRDP that could lead to file handle leaks. However, if exploited, it might result in unauthorized access to sensitive data, which could violate GDPR (data protection) or HIPAA (confidentiality) requirements depending on the context of use.

Mitigation Strategies

Update FreeRDP to version 3.32.0 or later to address the resource retention flaw in drive_process_irp_create. Disable drive redirection in RDP client settings if not required.

Hi! I’m here to help you understand CVE-2026-110831. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70