Vulnerability Details CVE-2026-91949
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 38.2%
CVSS Severity
CVSS v3 Score 9.3