CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

EUVD-2026-97688

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

CVE-2026-109244

FreeRDP versions 2.0.0 through 3.32.0 are vulnerable to an insecure permission flaw in the winpr-makecert component. The root cause is that the utility creates unencrypted private keys without enforcing owner-only file modes. On multi-user Unix hosts , local users can read these world-readable ke...