Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-64624 Arbitrary Command Execution in FreeRDP Before 3.28.0 via Malicious RDP Files https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64624
Post summary
CVE-2026-64624 exposes arbitrary command execution in FreeRDP via malicious RDP files in versions prior to 3.28.0.
FreeRDP: Κακόβουλα .rdp αρχεία κάνουν CLI option injection (CVE-2026-64624) https://secn.ws/c13Ddg
Post summary
The post announces a new FreeRDP vulnerability (CVE-2026-64624) where malicious .rdp files allow CLI option injection, presumably with PoC details linked.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |