Threats tagged 'ghsa-7xfq-9m67-9j5j'

KSmserver in KDE Plasma Workspace versions before 5.27.11.1 and 6.x before 6.0.5.1 accepts all local connections via ICE based solely on the host, allowing any local user to connect. This vulnerability enables a local attacker to access the session manager and potentially execute arbitrary code on the victim's session during the next boot by exploiting the session-restore feature and the /tmp directory.