CVE-2026-109243

MEDIUM 4.4

FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File

CVSS Score

4.4

EPSS Score

0.0%

EPSS Percentile

0th

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard logon to read the world-readable PKINIT private-key copy.

CWE	CWE-732
Vendor	freerdp
Product	freerdp
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for freerdp freerdp

Be the first to know when new medium vulnerabilities affecting freerdp freerdp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

FreeRDP / FreeRDP

3.0.0 < 3.32.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9p9-j22r-577p vulncheck.com: https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-insecure-permissions-on-soft-smartcard-private-key-file

Credits

Kushalkhemka opensec-intelligence mayank-jangid-moon skigeek16