Vulnerability in Kde Plasma-login-manager

CVE-2026-25710

The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.

EPSS: 0.000 (2.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References