Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: https://github.com/ShadowBlip Clear all filters
TI-2025-13099 CVE-2025-14338 · GHSA-fcpw-6r74-grvh

Polkit authentication dis isabled by default in inputplumber

Priority LOW 38

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00225 Published 2026-01-14 Fixed in 0.63.0 CWE-284
TI-2025-40542 CVE-2025-66005 · GHSA-2j9c-mj82-5gj2

Lack of Authentication in the InputManager D-Bus interface

Priority MEDIUM 44

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00203 Published 2026-01-14 Fixed in 0.63.0 CWE-863