helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| KDE | plasma-login-manager | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|---|
|
Kde
Subscribe
|
Plasma-login-manager
Subscribe
|
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 13 May 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 13 May 2026 11:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Kde
Kde plasma-login-manager |
|
| Vendors & Products |
Kde
Kde plasma-login-manager |
Wed, 13 May 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privileged D-Bus Helper Allows Service Account to Modify System Files |
Wed, 13 May 2026 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system. | |
| Weaknesses | CWE-250 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: suse
Published:
Updated: 2026-05-13T10:48:34.575Z
Reserved: 2026-02-05T15:37:24.184Z
Link: CVE-2026-25710
Vulnrichment
Updated: 2026-05-13T09:04:49.938Z
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-05-13T10:34:40Z