inputplumber vulnerabilities

2 known vulnerabilities in inputplumber from https://github.com/ShadowBlip. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  inputplumber: Incorrect Authorization

  CVE-2025-66005Jan 14, 2026https://github.com/ShadowBlip

  Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session.

• 8.5 High severity

  inputplumber: Improper Access Control

  CVE-2025-14338Jan 14, 2026https://github.com/ShadowBlip

  Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.