What is CVE-2025-32898?

CVE-2025-32898 is a medium-severity vulnerability in Kde Connect Verification-Code Protocol, classified under Insufficient Entropy. CVSS score: 4.7/10. Published 2025-12-05.

How severe is CVE-2025-32898?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Kde Connect Verification-Code Protocol

CVE-2025-32898

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

EPSS: 0.001 (3.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N.

Affected products

Kde Connect Verification-code Protocol — versions 0

Weakness classification (CWE)

CWE-331 — Insufficient Entropy

References

Frequently asked questions

What is CVE-2025-32898?: CVE-2025-32898 is a medium-severity vulnerability in Kde Connect Verification-Code Protocol, classified under Insufficient Entropy. CVSS score: 4.7/10. Published 2025-12-05.
How severe is CVE-2025-32898?: Medium severity. CVSS v3 base score is 4.7 out of 10.