Ubuntu 25.10 KDE Connect Authentication Vulnerability Discovered

Ubuntu 25.10 KDE Connect Authentication Vulnerability Discovered

First seen 3 Dec 2025, 20:40 UTC UbuntuLinuxsecurity 29.4

Article Content

Browse articles
ThreatCluster

A major authentication vulnerability has been identified in KDE Connect affecting Ubuntu 25.10 and its derivatives. The flaw allows attackers to bypass authentication by improperly handling device IDs, enabling the connection of unpaired devices. Users of affected systems are advised to take precautions.