vulnerability
SUSE: CVE-2025-49091: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:H/Au:N/C:C/I:C/A:P) | Aug 4, 2025 | Dec 5, 2025 | Dec 5, 2025 |
Severity
7
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:P)
Published
Aug 4, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025
Description
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
Solutions
suse-upgrade-konsolesuse-upgrade-konsole-partsuse-upgrade-konsole-part-langsuse-upgrade-konsole-zsh-completion
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.