CVE-2025-66003: Https://github.com/kde/ SMB4K

High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days.

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.

Affected products

• Https://github.com/kde/ SMB4K

Published 2026-01-08. Last modified 2026-09-30.