KDE Konsole before 25.04.2 allows remote code execution in a...
Vulnerability Description
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49091
Credits & Attribution
No credits recorded in the NVD database.
References
- https://invent.kde.org/utilities/konsole/-/tags
- https://konsole.kde.org/changelog.html
- https://www.openwall.com/lists/oss-security/2025/06/10/5
- https://invent.kde.org/utilities/konsole/-/commit/09d20dea109050b4c02fb73095f327b5642a2b75
- https://kde.org/info/security/advisory-20250609-1.txt
- https://proofnet.de/publikationen/konsole_rce.html
More from KDE
View All →Affected Vendor
Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.