PT-2026-67274 · Freerdp · Freerdp

1121984919 · CVE-2026-67294 · Published 2026-08-01 · Updated 2026-08-01

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0

Description Improper validation of the Extended Key Usage (EKU) purpose occurs during client-side server TLS authentication. Within the x509 utils verify() function, if the server-purpose (X509 PURPOSE SSL SERVER) verification fails, the system incorrectly falls back to client-purpose and any-purpose verification. This allows a trusted certificate that matches the hostname but is only valid for client authentication to be accepted as a legitimate RDP server certificate, bypassing purpose validation in environments that separate client and server certificate roles.

Recommendations Update to version 3.29.0 or later.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2026-67294

GHSA-89C6-JJRW-96H4

Affected Products

Freerdp

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67294.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f · Patch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-89c6-jjrw-96h4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-67294 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-67294 · Security Note
• https://vulncheck.com/advisories/freerdp-before-tls-certificate-eku-bypass · Note