CVEvulnerability

CVE-2025-66270

4.7 MEDIUM Published 2025-12-05 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-12-05
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weaknesses
CWE-290

Description

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49.

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References