Security Advisory

CVE-2026-25710

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-13 08:44:00
Last updated 2026-05-13 10:48:34
Assigner suse
CVSS score 7.0
State PUBLISHED

Description

The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.