High USN-8752-1 1 CVE

konsole vulnerability

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Konsole incorrectly handled certain URLs under
specific circumstances. A remote attacker could possibly use this issue to
execute arbitrary code.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	konsole	4:15.12.3-0ubuntu1+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	konsole	4:17.12.3-1ubuntu1+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	konsole	4:19.12.3-0ubuntu1+esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	konsole	4:21.12.3-0ubuntu1+esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS	konsole	4:23.08.5-0ubuntu4+esm1

Vulnerabilities 1

High 8.2

CVE-2025-49091 Public exploit

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme…

KDE Konsole konsole konsole Debian Ubuntu

Jun 11, 2025

References

report
https://ubuntu.com/security/CVE-2025-49091