EUVD-2026-26003Severity by source
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's implementation of the FileManager1 protocol allows the path given to be any type of file, including scripts or executables. (By default, Dolphin will then prompt the user to determine if they want to launch a script or executable; however, the intended behavior is to block the attempted action, not present a consent prompt.)
AnalysisAI
KDE Dolphin before 25.12.3 allows sandboxed applications (running under Flatpak or AppArmor confinement) to bypass sandbox restrictions and open arbitrary files outside their containment boundary through the FileManager1 D-Bus protocol implementation. An attacker controlling a sandboxed application can exploit this to access sensitive files or execute scripts with user interaction, circumventing the intended isolation model.
Technical ContextAI
KDE Dolphin implements the FileManager1 D-Bus protocol, a system-level service that allows applications to request file manager operations. The vulnerability exists because Dolphin's protocol handler accepts arbitrary file paths without validating whether the requesting application has sandbox permission to access those paths. CWE-669 (Incorrect Resource Transfer Between Spheres) describes the root cause: resources (file paths) are transferred from a confined application context to an unconfined file manager without proper boundary enforcement. When a Flatpak or AppArmor-confined application calls FileManager1 methods with an absolute path, Dolphin opens that path in its own context, which runs outside the sandbox and thus has access to the host filesystem. The implementation compounds the risk by defaulting to a user-consent prompt for executable files rather than a deny-by-default policy.
RemediationAI
Upgrade KDE Dolphin to version 25.12.3 or later immediately. The fix is confirmed released at https://github.com/KDE/dolphin/releases/tag/v25.12.3 and documented in the KDE security advisory at https://kde.org/info/security/advisory-20260427-2.txt. For distributions packaging older versions, request backported security updates. If immediate upgrade is not feasible, mitigate by restricting the scope of Flatpak applications permitted to run on the system - whitelist only trusted applications from official repositories and disable sideloaded or third-party Flatpak sources, which reduces the likelihood of a malicious sandboxed application being installed. Organizations relying on AppArmor can audit sandbox profiles to ensure Dolphin runs with appropriate confinement; however, this is a defense-in-depth measure and does not replace the patch. Users should avoid running untrusted applications in Flatpak sandboxes until patched, as the sandbox is no longer a reliable security boundary for file access in affected Dolphin versions.
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) a
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write t
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to as
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and le
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with min
aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hi
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, whic
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NUL
KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. Rated medium s
A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will tri
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" i
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today