> USN-8857-1: KCoreAddons vulnerability
[DATE: 01/10/2026 10:48]
[LANGUAGE: EN]
It was discovered that KCoreAddons incorrectly handled shell argument
quoting in KShell::quoteArgs. The parsing did not adequately handle shell
metacharacters, which could lead to a shell escape. An attacker could
possibly use this issue to execute arbitrary commands in applications that
relied on this method to handle user input.