https://github.com/ShadowBlip Inputplumber vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting https://github.com/ShadowBlip Inputplumber: 2 record(s), with affected versions and fixes.
CVE-2025-66005
High · 8.5
CWE-863 Jan 14, 2026
Lack of Authentication in the InputManager D-Bus interface
Lack of authorization of the InputManager D-Bus interface in
InputPlumber versions before v0.63.0 can lead to local Denial-of-Service,
information leak or even privilege escalation in the context of the
currently active user session.
CVE-2025-14338
High · 8.5
CWE-284 Jan 14, 2026
Polkit authentication dis isabled by default in inputplumber
Polkit authentication dis isabled by default and a race
condition in the Polkit authorization check in versions before v0.69.0 can
lead to the same issues as in CVE-2025-66005.