Updated konsole packages fix security vulnerability

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

EUVD-1999-1249

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2025-49091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// o...

Oracle Linux 7 : konsole (ELSA-2025-12346)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12346 advisory. 4.10.5-5.0.1 - Clear the arguments if the command is not found Orabug: 38260855CVE-2025-49091 Tenable has extracted the preceding description block directly fr...

Important: Red Hat Security Advisory: konsole security update

An update for konsole is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

ROS-20250707-01

A vulnerability in the Konsole terminal emulator of the KDE desktop environment is related to the implementation of an incorrect control flow when processing telnet://, rlogin:// and ssh:// URLs. control flow when handling telnet://, rlogin:// and ssh:// URLs. Exploitation of the vulnerability...

The vulnerability of the Konsole terminal emulator in the KDE desktop environment allows a hacker to execute arbitrary code.

The vulnerability of the Konsole terminal emulator in the KDE desktop environment is related to the improper handling of control flows when processing URL schemes like telnet://, rlogin://, and ssh://. Exploiting this vulnerability allows a remote attacker to execute arbitrary code when a user...

GLSA-202506-13 : Konsole: Code execution

The remote host is affected by the vulnerability described in GLSA-202506-13 Konsole: Code execution Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and...

CVE-2025-49091

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

[ASA-202506-5] konsole: arbitrary code execution

Arch Linux Security Advisory ASA-202506-5 ========================================= Severity: High Date : 2025-06-11 CVE-ID : CVE-2025-49091 Package : konsole Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2897 Summary ======= The package konsole before...

PT-2025-24908 · Kde +4 · Konsole +4

Name of the Vulnerable Software and Affected Versions: konsole versions prior to 25.04.2 konsole versions 4:20.12.3 and earlier konsole versions 4:22.12.3 and earlier Description: The vulnerability in KDE Konsole allows remote code execution when loading URLs from scheme handlers such as ssh://,...

CVE-1999-1268

Vulnerability details (CVE-1999-1268) show a local-privilege/bypass issue in KDE konsole where a local user can hijack or observe another user’s session by accessing certain devices. The provided documents do not specify the exact affected version(s), vulnerable component/file, or underlying root...

CVE-1999-1268

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...

CVE-1999-1268

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...