CVE-2026-109245
Received Received - Intake

Improper Certificate Validation in FreeRDP

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description
FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshakes without verifying the server certificate chain. On-path attackers can impersonate login.microsoftonline.com in the Azure AD authentication flow to capture OAuth authorization codes and substitute the OpenID discovery document.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-109245
EUVD
EUVD-2026-97689

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FreeRDP FreeRDP 3.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-295 The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeRDP versions 3.0.0 through 3.31.0 have an improper certificate validation flaw in the freerdp_http_request() function. This allows TLS handshakes to complete without verifying the server certificate chain. An attacker on the network path can impersonate login.microsoftonline.com during Azure AD authentication, capturing OAuth codes and replacing OpenID discovery documents.

Detection Guidance

To detect this vulnerability, check FreeRDP versions between 3.0.0 and 3.31.0. On Linux, run: freerdp2-shadow --version or freerdp-shadow --version. On Windows, check installed program versions via Control Panel or PowerShell: Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -like '*FreeRDP*'}. Monitor network traffic for TLS handshakes to login.microsoftonline.com without certificate validation.

Impact Analysis

If you use FreeRDP with Azure AD authentication, an attacker could intercept your connection to login.microsoftonline.com. They may capture sensitive OAuth authorization codes and tokens, potentially gaining unauthorized access to your Azure resources or data.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations using affected FreeRDP versions may face compliance violations due to potential data breaches.

Mitigation Strategies

Upgrade FreeRDP to version 3.32.0 or later immediately. Disable Azure AD authentication paths if not required. Use network monitoring to detect suspicious TLS handshakes to login.microsoftonline.com. Ensure all FreeRDP clients enforce certificate validation by setting SSL_VERIFY_PEER mode.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-109245. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart