CVE-2026-110831 FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE

What is CVE-2026-110831?

CVE-2026-110831 is a medium-severity denial of service vulnerability in Freerdp Freerdp, published on 14 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with drive redirection enabled can send IRP_MJ_CREATE with AllocationSize set to UINT64_MAX, forcing the seek to fail and leaking the file object and operating-system handle until drive teardown.

Weakness: CWE-775

Which versions are affected by CVE-2026-110831?

It affects 1 product.

Products include Freerdp Freerdp.

How do I fix CVE-2026-110831?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2026-110831 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-110831 exists.

Other vulnerabilities in Freerdp Freerdp

• CVE-2021-37594 Other in n/a Critical 9.8
• CVE-2021-37595 Other in n/a Critical 9.8
• CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr Critical 9.4
• CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass Critical 9.3
• CVE-2026-67289 FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection Critical 9.3

All Freerdp Freerdp vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2026-110831, GHSA-jgw9-wqvx-j495, GHSA-mh9j-p69m-cjqw, UBUNTU-CVE-2026-110831.