CVE-2025-49091

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.

• CWE-670

• https://invent.kde.org/utilities/konsole/-/commit/09d20dea109050b4c02fb73095f327b5642a2b75
• https://invent.kde.org/utilities/konsole/-/tags
• https://kde.org/info/security/advisory-20250609-1.txt
• https://konsole.kde.org/changelog.html
• https://proofnet.de/publikationen/konsole_rce.html
• https://www.openwall.com/lists/oss-security/2025/06/10/5
• https://lists.debian.org/debian-lts-announce/2025/06/msg00019.html

Published

Jun 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49084CVE-2025-49084 is a vulnerability in the management console …9.1
• CVE-2025-49087In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discr…3.7
• CVE-2025-49088Pexip Infinity 32.0 through 37.1 before 37.2, in certain con…5.9
• CVE-2025-49089wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via…6.3
• CVE-2025-4909A vulnerability classified as critical was found in SourceCo…7.3
• CVE-2025-49090The Matrix specification before 1.16 (i.e., with a room vers…7.1
• CVE-2025-4910A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-4911A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-49112setDeferredReply in networking.c in Valkey through 8.1.1 has…3.1
• CVE-2025-49113Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allo…8.8
• CVE-2025-4912A vulnerability has been found in SourceCodester Student Res…9.1
• CVE-2025-49124Untrusted Search Path vulnerability in Apache Tomcat install…8.4