CVE-2026-109243: freerdp freerdp

CVSS 4.4 (medium) · published 2026-10-12

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard logon to read the world-readable PKINIT private-key copy.

Affected products (NVD): freerdp freerdp

Fixed in (NVD): 3.32.0

Weakness: CWE-732

Source: NVD CVE-2026-109243

References

• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9p9-j22r-577p
• https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-insecure-permissions-on-soft-smartcard-private-key-file
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9p9-j22r-577p

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.