KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade konsole | Jun 12, 2025 | Jun 11, 2025 |
| Gentoo Linux | — | Upgrade kde-apps/konsole. | Jun 16, 2025 | Jun 11, 2025 |
| Oracle_linux | — | Upgrade konsole-partUpgrade konsole | Aug 14, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade konsole-partUpgrade konsole-debuginfoUpgrade konsole | Jul 9, 2025 | Jun 11, 2025 |
| Suse | — | Upgrade konsoleUpgrade konsole-part-langUpgrade konsole-partUpgrade konsole-zsh-completion | Dec 5, 2025 | Aug 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub