CVE-2026-110831
Description
A flaw was found in FreeRDP. When a client connects to a malicious Remote Desktop Protocol (RDP) server with drive redirection enabled, the server can send a specially crafted request that triggers an error during file allocation. Because FreeRDP fails to release the opened local file when this operation fails, operating system file handles remain open until drive teardown. This issue can allow an attacker to cause resource exhaustion, potentially resulting in a Denial of Service (DoS) on the client system.
Statement
This flaw is rated Moderate because a file-handle leak during drive redirection can cause limited resource exhaustion (A:L) after the user connects with drive redirection enabled (UI:R).
Mitigation
Restrict FreeRDP clients to trusted RDP servers and networks.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.3 | N/A | 4.3 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | Low | N/A | Low |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
