KDE Connect Protocol Vulnerability in Multiple Platforms

CVE-2025-66270

What is CVE-2025-66270?

The KDE Connect protocol prior to version 25.12 on desktop and earlier versions on iOS, Android, GSConnect, and Valent fails to adequately correlate device IDs across transmitted packets. This imperfection can potentially lead to security issues, allowing unauthorized access or data interception. Users of affected versions are encouraged to update their applications to ensure secure communication between devices.

References