RHEL 7 : konsole (RHSA-2025:12346)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12346 advisory. KDE Terminal emulator. Security Fixes: konsole: Konsole Remote Code Execution Vulnerability CVE-2025-49091 For more details about the security issue...

Debian: Security Advisory (DSA-5945-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5945-1] konsole security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5945-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2025 https://www.debian.org/security/faq -...

Debian dsa-5945 : konsole - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5945 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5945-1 [email protected] https://www.debian.org/security/ Moritz...

Debian: Security Advisory (DLA-4220-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4220 : konsole - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4220 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4220-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-49091

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

CVE-2025-49091

KDE Konsole (before version 25.04.2) is vulnerable to remote code execution via its URL-handling feature. If Konsole loads URLs from scheme handlers (e.g., ssh://, telnet://, rlogin://) and the corresponding binary is unavailable, it can fall back to invoking /bin/bash with the URL arguments, all...

[ASA-202506-5] konsole: arbitrary code execution

Arch Linux Security Advisory ASA-202506-5 ========================================= Severity: High Date : 2025-06-11 CVE-ID : CVE-2025-49091 Package : konsole Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2897 Summary ======= The package konsole before...