news
KDE Connect security advisory released due to possible authentication bypass
Quoting: KDE Connect security advisory released due to possible authentication bypass | GamingOnLinux —
KDE Connect is a popular cross-platform app that allows you to send files across devices and more - with a security advisory being sent out due to a woops. Noted as CVE-2025-66270, that woops could allow an attacker to entirely skip proper authentication.
Also:
-
These versions of KDE Connect are vulnerable to exploit
The developers of the popular KDE Connect application for desktop computers and mobile phones issued a security advisory this weekend stating you should stop using certain versions of the app on untrusted networks. A security flaw allows devices running those versions to interact with devices pretending to be ones you authenticated in the past.
The security advisory says if you want to avoid risk, you should stop using KDE Connect and its variants with the following version numbers on public networks with devices you don't know...