Skip to content
OpenAdvisories
High · 8.5 CVE-2025-66005 EUVD-2026-2521GHSA-2j9c-mj82-5gj2

Lack of Authentication in the InputManager D-Bus interface

Published Jan 14, 2026 · Updated Jan 14, 2026 · Assigned by suse

Description

Lack of authorization of the InputManager D-Bus interface in
InputPlumber versions before v0.63.0 can lead to local Denial-of-Service,
information leak or even privilege escalation in the context of the
currently active user session.

Affected products

VendorProductAffectedFixed
https://github.com/ShadowBlip inputplumber ? – < 0.63.0 0.63.0

References