https://github.com/KDE/ vulnerabilities
Published CVEs affecting https://github.com/KDE/ products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-66003
High · 7.3
CWE-73 Jan 8, 2026
Local users can perform a local root exploit via smb4k mounthelper
An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.
CVE-2025-66002
Medium · 6.9
CWE-88 Jan 8, 2026
Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper