CVE-2026-64624CWE-88

FreeRDP RDP File Parser Remote Code Execution via CLI Options

High · published July 20, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Published
2026-07-20T21:50Z
EPSS history
Timeline
  • 20 JUL 21:50Z
    FreeRDP RDP File Parser Remote Code Execution via CLI Options
    cvelistv5