Medium severity4.7NVD Advisory· Published Dec 5, 2025· Updated Apr 15, 2026

CVE-2025-32898

Description

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GSConnect/Gsconnectinferred
Range: <59
KDE/Kdeconnectllm-fuzzy
Range: <1.33.0 (Android), <25.04 (desktop), <0.5 (iOS)

Patches

Vulnerability mechanics

References

kde.org/info/security/advisory-20250418-3.txtnvd
kdeconnect.kde.orgnvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000