Permalink
CVE-2026-45184
6.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): Low (L)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): Low (L)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled …
Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.
References
Affected products
Kdenlive
- <26.04.1
Matching in nixpkgs
pkgs.kdePackages.kdenlive
Free and open source video editor, based on MLT Framework and KDE Frameworks
pkgs.pkgsRocm.kdePackages.kdenlive
Free and open source video editor, based on MLT Framework and KDE Frameworks
Package maintainers
-
@FRidh Frederik Rietdijk <fridh@fridh.nl>
-
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
-
@nyanloutre Paul Trehiou <paul@nyanlout.re>
-
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
-
@bkchr Bastian Köcher <nixos@kchr.de>
-
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@K900 Ilya K. <me@0upti.me>
-
@mjm Matt Moriarity <matt@mattmoriarity.com>