Live › vulnerability › CVE-2026-121390
FreeRDP 3.0.0 before 3.32.2, built with WITH_AAD=ON, accepts an ARM gateway response that lacks a string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed gateway selected by the user can make the client process abort.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Only FreeRDP 3.0.0 through versions before 3.32.2 built with WITH_AAD=ON are affected, and the risk comes from connecting to a gateway the user chose. Teams that run FreeRDP clients built with Azure AD support should check their versions, while those on other builds or on fixed releases can skip it.
No product ranges from the sources yet.
xfreerdp --version or the packaged version of freerdp.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a response to abort the client process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121390")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.