KDE messagelib Vulnerability in Google Safe Browsing API Implementation

CVE-2025-69412

What is CVE-2025-69412?

KDE messagelib versions prior to 25.11.90 contain a vulnerability in their implementation of the Google Safe Browsing Lookup API. This security flaw allows the software to ignore SSL errors during calls to the API, which can be exploited to spoof threat data. Although the Lookup API is not utilized by default in messagelib's configuration, the oversight presents potential risks if the API is enabled. Users and administrators should be aware of this vulnerability and consider updating to the latest version to mitigate potential threats.

References