Threats tagged 'ghsa-mx9v-6x7q-rjc2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.4%	CVE-2026-67295FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibling paths outside the configured shared root Medium6.3EPSS 0.4%2026-08-01GCVE DatabaseCVE-2026-67295 FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibling paths outside the configured shared root. A malicious RDP server can read, write, delete, and enumerate files in sibling directories by sending non-rooted paths that bypass the shared-root boundary check. EPSS 0.4%Vulnerability CWE-22 #ghsa-mx9v-6x7q-rjc2	GCVE Database	2026-08-01

Page 1 of 1