FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

Summary

FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Common Name fallback despite non-matching SAN entries and matches IP literals against DNS strings. Man-in-the-middle attackers holding a certificate from a client-trusted CA can bypass server identity checks to intercept RDP sessions, including keystrokes, clipboard, and screen content.

Remediation

1. Inventory every FreeRDP FreeRDP deployment, including staging.
2. Upgrade FreeRDP FreeRDP to 3.32.2.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262
• Advisoryhttps://www.vulncheck.com/advisories/freerdp-before-3.32.2-certificate-identity-validation-bypass-via-tls-verify-certificate