Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-66005

Lack of Authentication in the InputManager D-Bus interface

Description

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

https://github.com/ShadowBlip inputplumber

Default version status: unaffected

  • ? to < 0.63.0affected

References