Is CVE-2026-110835 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110835?

CVE-2026-110835 has a CVSS v3 severity of MEDIUM (4).

Back

CVE-2026-110835

Description

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a proxy using FixedTarget=false and an upstream HTTP proxy can alter HTTP request/header framing at that upstream proxy.