CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.29.0 are vulnerable to improper validation of server-supplied RDPDR paths in drive redirection, enabling attackers to exploit this flaw by accessing sibling directories outside the designated shared root. This vulnerability allows a malicious RDP server to perform unauthorized file operations, including reading, writing, deleting, and enumerating files in these directories. Organizations using FreeRDP for remote desktop services should prioritize patching to mitigate potential data exposure and unauthorized access risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibling paths outside the configured shared root. A malicious RDP server can read, write, delete, and enumerate files in sibling directories by sending non-rooted paths that bypass the shared-root boundary check.