CVE-2026-109952

The FreeRDP client 3.0.0 before 3.32.0 is vulnerable to a security protocol downgrade because it fails to validate server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set within the nego_process_negotiation_response() function. A malicious server or man-in-the-middl...