CVE-2025-66002 — Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

CVE-2025-66002

Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation PUBLISHED

Description (CNA)

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper

Affected (CNA)

Vendor / product	Versions
https://github.com/KDE/ / smb4k	affected ? before 4.0.5

CWE

CWE-88

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-66002
https://security.opensuse.org/2025/12/10/smb4k-major-issues-in-kauth-helper.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.