Local Privilege Escalation Flaw in KDE Kleopatra for Windows

CVE-2026-41527

What is CVE-2026-41527?

A local privilege escalation vulnerability exists in KDE Kleopatra for Windows due to a flaw in the KUniqueService mechanism, which is designed to ensure that only one instance of the application runs at a time. This weakness allows local users to exploit the service to gain elevated privileges, thereby compromising the user’s security by potentially granting unauthorized access to sensitive information and functionalities of the Kleopatra application.

References