CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.32.0 are vulnerable to a path traversal issue that allows a malicious RDP server to manipulate clipboard data, potentially enabling the user to paste arbitrary local files instead of the intended remote files. This vulnerability poses a risk primarily to users who frequently utilize RDP for remote access and clipboard functionality. Organizations using FreeRDP should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences. A malicious RDP server can supply '../' sequences so the user's next clipboard paste copies an arbitrary local file readable by the client user instead of the expected remote file.