A vulnerability, which was classified as critical, was found in FreeRDP up to 3.31.x. Affected is the function http_proxy_connect of the component Proxy. The manipulation of the argument msts results in injection. This vulnerability was named CVE-2026-110835. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.
Vulnerability
CVE-2026-110835
VulDB
Apply vendor security patch