Medium severity6.9NVD Advisory· Published Apr 21, 2026· Updated Apr 22, 2026

CVE-2026-41527

Description

KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism (KUniqueService) for ensuring that only one instance is running.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

KDE/Kleopatrareferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <26.08.0

Patches

Vulnerability mechanics

References

commits.kde.org/kleopatra/73471abb92d99c56354adb582bfaec2764c22b79nvd
github.com/KDE/kleopatra/releasesnvd
kde.org/info/security/advisory-20260408-1.txtnvd

News mentions

No linked articles in our index yet.

cvss	0.449
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000