Skip to content
OpenAdvisories

Vendor

https://github.com/ShadowBlip

2 known vulnerabilities.

Products

inputplumber 2
All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-14338

    Polkit authentication dis isabled by default in inputplumber

    Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.

    https://github.com/ShadowBlip inputplumber
  • High 8.5
    CVE-2025-66005

    Lack of Authentication in the InputManager D-Bus interface

    Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session.

    https://github.com/ShadowBlip inputplumber