CVE-2026-109245

FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request

State: Published
Severity: 7.4 High
Published: Oct 12, 2026
Updated: Oct 13, 2026
Reserved: Oct 12, 2026

Description

FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshakes without verifying the server certificate chain. On-path attackers can impersonate login.microsoftonline.com in the Azure AD authentication flow to capture OAuth authorization codes and substitute the OpenID discovery document.

Scores

CVSS	Score	Vector	Source
4.0	7.4 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N	VulnCheck
3.1	6.8 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N	VulnCheck

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
FreeRDPFreeRDP	3.0.0 to before 3.32.0Affected 3.32.0Not affected

References

GitHub Security Advisory (GHSA-h44v-39x6-9xvg)vendor-advisory
VulnCheck Advisory: FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_requestthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.