Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
KDE Connect: Unauthenticated Device Connection Risk
published 11 months ago
Summary
KDE Connect, a tool for connecting devices, has a flaw that allows hackers to connect to a device without being authorized. This could potentially allow an attacker to access your device without your permission. To stay safe, update KDE Connect to the latest version.
What to do
- Update canonical kdeconnect to version 25.08.1-0ubuntu2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:25.10 | canonical | kdeconnect |
< 25.08.1-0ubuntu2.1 Fix: upgrade to 25.08.1-0ubuntu2.1
|
Original advisory text
kdeconnect vulnerability
It was discovered that KDE Connect incorrectly handled device IDs. An
attacker could possibly use this issue to bypass authentication and connect
an unpaired device.
attacker could possibly use this issue to bypass authentication and connect
an unpaired device.
References
- https://ubuntu.com/security/notices/USN-7905-1 Vendor Advisory
Timeline
Published3 Dec 2025
Updated24 Apr 2026
First seen24 Apr 2026
Sources
USN-7905-1 · OSV
Track software like this
Free during beta