CVE-2026-109953

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to an insufficiently protected credentials vulnerability (CWE-522). When using the /restricted-admin option, the software fails to suppress CredSSP credential delegation , causing the application to transmit cleartext passwords to the RDP server...