PT-2026-34191 · Kde · Kleopatra

Published 2026-04-21 · Updated 2026-04-27 · CVE-2026-41527

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions KDE Kleopatra versions prior to 26.08.0

Description An error in the KUniqueService mechanism, which ensures that only one instance of the application is running, allows local users on Windows to obtain the privileges of a Kleopatra user.

Recommendations Update to version 26.08.0 or later.

Fix

Weakness Enumeration

CWE-670

Related Identifiers

CVE-2026-41527

Affected Products

Kleopatra

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-41527 · Security Note
• https://github.com/KDE/kleopatra/releases · Note
• https://kde.org/info/security/advisory-20260408-1.txt · Note
• https://twitter.com/CVEnew/status/2048910170588348584 · Twitter Post
• https://commits.kde.org/kleopatra/73471abb92d99c56354adb582bfaec2764c22b79 · Note
• https://twitter.com/infoflowcloud/status/2048911807138378029 · Twitter Post