EUVD-2026-97687

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2026-109243

The FreeRDP application, versions 3.0.0 through 3.31.x , is vulnerable to an incorrect permission assignment (CWE-732) in the soft-smartcard component. Specifically, the crypto_write_pem function fails to apply owner-only permissions to private keys. On multi-user Unix hosts, local attackers can ...