CVE Explorer

CVE-2026-41525

KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's implementation of the FileManager1 protocol allows the path given to be any type of file, including scripts or executables. (By default, Dolphin will then prompt the user to determine if they want to launch a script or executable; however, the intended behavior is to block the attempted action, not present a consent p

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9532cd113c82c419c3e46ad421939d2fdf7b104c89c55488557063a7c1fa7728

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"Dolphin","vendor":"KDE","versions":[{"lessThan":"25.12.3","status":"affected","version":"0","versionType":"custom"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-669","description":"CWE-669 Incorrect Resource Transfer Between Spheres","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/problemTypes/0/descriptions/0

Source references

4 source assertions

{"url":"http://www.openwall.com/lists/oss-security/2026/05/19/1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/adp/1/references/0

{"url":"https://github.com/KDE/dolphin/releases/tag/v25.12.3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/references/1

{"url":"https://invent.kde.org/system/dolphin/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/references/0

{"url":"https://kde.org/info/security/advisory-20260427-2.txt"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a76101e43b37e00f7a02a993cfbda2f2161653d77d94f2f8ce0e4bddfbae33f8 · sha256:bc721414d5139c6e… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer