Summary
It was discovered that KDE Connect incorrectly handled device IDs. An
attacker could possibly use this issue to bypass authentication and connect
an unpaired device.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | kdeconnect | 25.08.1-0ubuntu2.1 |
Vulnerabilities 1
-
Medium 4.7
The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect…
References
-
report
https://ubuntu.com/security/CVE-2025-66270