KDE Plasma-login-manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting KDE Plasma-login-manager: 1 record(s), with affected versions and fixes.

CVE-2026-25710 High · 7.0 CWE-250 May 13, 2026

Execution with Unnecessary Privileges in KDE Plasma-login-manager

The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.