CVE-2026-67289: FreeRDP ≤3.28.0 has a CRITICAL flaw (CVSS 9.8) in RDP redirection — improper CRLF/control character validation exposes clients to HTTP header injection via proxies. Upgrade to 3.29.0+ now. https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-does-not-validate-crlf-and-control-characters-in-the-server-2a6872dd9d8a1a0c #OffSeq #FreeRDP #CVE202667289 #infosec