August 14, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-66005NVD

Vulnerability Summary

Lack of authorization of the InputManager D-Bus interface in
InputPlumber versions before v0.63.0 can lead to local Denial-of-Service,
information leak or even privilege escalation in the context of the
currently active user session.
Severity Level
HIGH(8.5)
Published Date
Jan 14, 2026
Last Modified
Jan 14, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v4.0 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone