# CVE-2025-49091

## Summary

- **CVE ID:** CVE-2025-49091
- **Severity:** HIGH
- **CVSS Score:** 8.2 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L)
- **CWE:** CWE-670
- **Published:** Jun 11, 2025
- **Last Modified:** Mar 13, 2026

## Description

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.

## Affected Products

- KDE — Konsole (0)

## References

- [CNA](https://invent.kde.org/utilities/konsole/-/tags)
- [CNA](https://konsole.kde.org/changelog.html)
- [CNA](https://www.openwall.com/lists/oss-security/2025/06/10/5)
- [CNA](https://invent.kde.org/utilities/konsole/-/commit/09d20dea109050b4c02fb73095f327b5642a2b75)
- [CNA](https://kde.org/info/security/advisory-20250609-1.txt)
- [CNA](https://proofnet.de/publikationen/konsole_rce.html)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/06/msg00019.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.62%
- **EPSS Percentile:** 47.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._