Cleartext Credential Disclosure in FreeRDP by FreeRDP

CVE-2026-109953

What is CVE-2026-109953?

FreeRDP versions prior to 3.32.0 contain a vulnerability where the /restricted-admin option inadequately secures credentials, resulting in the exposure of sensitive information. This flaw allows a compromised or man-in-the-middle host to decode Cleartext TSPasswordCreds and gain access to critical client information, including administrative domain, usernames, and passwords. Consequently, this presents a significant security risk for users relying on FreeRDP for remote desktop access.

References