Vulnerability in Kde Plasma-login-manager
CVE-2026-25710
The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.
EPSS: 0.000 (2.9th percentile) — read the EPSS interpretation.
Affected products
- Kde Plasma-login-manager — versions 0