CVE-2026-42095

Description

bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL.

PUBLISHED Reserved 2026-04-24 | Published 2026-04-24 | Updated 2026-04-24 | Assigner mitre

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

References

github.com/KDE/arianna/tags

kde.org/info/security/advisory-20260424-1.txt

invent.kde.org/...t/485851d25de279a9d2711d3780443530e9851300

invent.kde.org/...t/3cd56fce103ab62887c5592827d78a1197cd926a

cve.org (CVE-2026-42095)

nvd.nist.gov (CVE-2026-42095)

Download JSON