Back Linuxsecurity

Ubuntu Konsole Important Remote Code Exec Risk USN-8752-1 CVE-2025

Linuxsecurity • September 15, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

Konsole could be made to run programs as your login if it opened a specially crafted URL. Software Description: - konsole: X terminal emulator Details: It was discovered that Konsole incorrectly handled certain URLs under specific circumstances. A remote attacker could possibly use this issue to execute arbitrary code.

Konsole could be made to run programs as your login if it opened a

specially crafted URL.

Software Description:

- konsole: X terminal emulator

It was discovered that Konsole incorrectly handled certain URLs under

specific circumstances. A remote attacker could possibly use this issue to

execute arbitrary code.

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS konsole 4:23.08.5-0ubuntu4+esm1 Available with Ubuntu Pro konsole-kpart 4:23.08.5-0ubuntu4+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS konsole 4:21.12.3-0ubuntu1+esm1 Available with Ubuntu Pro konsole-kpart 4:21.12.3-0ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS konsole 4:19.12.3-0ubuntu1+esm1 Available with Ubuntu Pro konsole-kpart 4:19.12.3-0ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS konsole 4:17.12.3-1ubuntu1+esm1 Available with Ubuntu Pro konsole-kpart 4:17.12.3-1ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS konsole 4:15.12.3-0ubuntu1+esm1 Available with Ubuntu Pro konsole-kpart 4:15.12.3-0ubuntu1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8752-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Risk in Ubuntu Konsole A vulnerability in the Konsole terminal emulator allows remote attackers to execute arbitrary code by crafting specific URLs. This flaw affects multiple versions of Ubuntu, including 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. Users are urged to update their systems to mitigate this risk. The vulnerability has been assigned the CVE identifier CVE-2025. The issue was discovered due to improper handling of URLs in Konsole, which could allow an attacker to run programs as the logged-in user. A standard system update is recommended to apply the necessary patches. Ubuntu Pro users have access to extended support for affected packages. The vulnerability was disclosed on September 14, 2026, and is considered critical due to its potential impact on user systems. 2 sources 72

Extracted Entities

Ubuntu Konsole Important Remote Code Exec Risk USN-8752-1 CVE-2025

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)