CyberSecBulletin

https://github.com/KDE/ vulnerabilities

We track 1 vulnerability in https://github.com/KDE/ products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest https://github.com/KDE/ vulnerabilities

  • 7.3 High severity

    smb4k: External Control of File Name or Path

    CVE-2025-66003https://github.com/KDE/

    An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.