KDE Connect Verification Code Protocol vulnerabilities

1 vulnerability

Known vulnerabilities in KDE Connect Verification Code Protocol, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.7CVE-2025-32898debiangnome-shell-extension-gsconnect+4
EPSS score
0.15%
The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.