CVE-2025-32898

Name of the Vulnerable Software and Affected Versions KDE Connect versions prior to 1.33.0 Valent versions prior to 1.0.0.alpha.47 GSConnect versions prior to 59 KDE Connect on Android versions prior to 1.33.0 KDE Connect on desktop versions prior to 25.04 KDE Connect on iOS versions prior to 0.5

Description The KDE Connect verification-code protocol uses only 8 characters, which allows for brute-force attacks.

Recommendations Update KDE Connect to version 1.33.0 or later. Update Valent to version 1.0.0.alpha.47 or later. Update GSConnect to version 59 or later. Update KDE Connect on Android to version 1.33.0 or later. Update KDE Connect on desktop to version 25.04 or later. Update KDE Connect on iOS to version 0.5 or later.