CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.28.0 are vulnerable to command injection through specially crafted RDP files that exploit the handling of lines starting with a forward slash. This flaw allows attackers to execute arbitrary commands, bypass certificate validation, and access local filesystems without user interaction. Organizations using FreeRDP should prioritize patching to mitigate the risk of unauthorized access and command execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.
Related CVEs
Other vulnerabilities affecting the same vendor(s)