CVE-2025-14338: Https://github.com/shadowblip Inputplumber

High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.

Affected products

• Https://github.com/shadowblip Inputplumber

Published 2026-01-14. Last modified 2026-06-17.