Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vxc-ggfg-5366

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

EPSS

Процентиль: 8%
0.0018
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 7.8
ubuntu
12 дней назад

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

CVSS3: 7.3
redhat
12 дней назад

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

CVSS3: 7.8
nvd
12 дней назад

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

CVSS3: 7.8
debian
12 дней назад

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP ...

EPSS

Процентиль: 8%
0.0018
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-88