FreeRDP CVE-2026-109247

Exploitation requires that the victim connect to a malicious or compromised RDP server and then perform a clipboard file copy-and-paste originating from that server's FileGroupDescriptorW clipboard data - the attacker cannot trigger the copy without the user's paste action (reflected as UI:A and AT:P). The vulnerable feature is clipboard file redirection in WinPR's synthetic file handling; deployments that disable clipboard/file redirection are not exposed. The exfiltrated file is limited to one readable by the client user, and the outcome is a single unintended local file being copied rather than remote code execution. Limiting factors: hostile-server prerequisite, mandatory and correctly-timed user interaction, no authentication bypass, and confidentiality-only impact.

This is a genuinely low-priority issue, and the signals are consistent rather than conflicting. The vendor-assigned CVSS 4.0 base score is 2.1 (Low), and the vector agrees with the description: AV:N (the malicious actor is a network-reachable RDP server), AC:L, but AT:P (a specific attack requirement - the victim must perform a clipboard paste at the right moment) and UI:A (active user interaction). Impact is limited to VC:L (low confidentiality) with no integrity or availability impact, matching the described outcome of copying one locally-readable file. Critically, exploitation is inverted from the usual client→server trust model: it requires the user to connect to a malicious or compromised RDP server AND then paste clipboard content, so the attacker cannot act unilaterally. No EPSS score was provided in the input. There is no CISA KEV listing and no public exploit identified, so there is no evidence of real-world exploitation. The combination of a hostile-server prerequisite, mandatory user paste action, and only low-confidentiality impact means this is a defense-in-depth hardening fix, not an urgent patch - a low-CVSS, low-real-risk issue that is correctly scored.

A user connects their FreeRDP-based client to an attacker-controlled or compromised RDP server and copies what appears to be a remote file to the clipboard. The server embeds '../' sequences in the cFileName of the FileGroupDescriptorW clipboard data, so when the user pastes, the client resolves the path outside the intended directory and copies an arbitrary local file readable by the client user instead of the expected remote file. No public exploit code was identified at time of analysis.