CVE-2025-49091
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2025-49091. We'll provide specific mitigation strategies based on your environment and risk profile.
CVSS Score
V3.1Attack Vector Metrics
Impact Metrics
Description
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
Available Exploits
Related News
Posted by Dennis Dast on Jun 10Code execution from web browser using URL schemes handled by KDE's KTelnetService and Konsole ============================================================================================= Abstract -------- This issue affects s…
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
Affected Products (ENISA)
ENISA Scoring
CVSS Score (3.1)
EPSS Score
ENISA References
Data provided by ENISA EU Vulnerability Database. Last updated: June 11, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L
References
Advisory provided by GitHub Security Advisory Database. Published: June 11, 2025, Modified: June 11, 2025
Social Media Intelligence
Real-time discussions and threat intelligence from social platforms
Code execution from web browser using URL schemes handled by KDE's KTelnetService and Konsole (CVE-2025-49091) This issue affects systems where KTelnetService and a vulnerable version of Konsole are installed but at least one of the programs telnet, rlogin or ssh is not installed. The vulnerability is in KDE's terminal emulator …