A newly added privileged D‑Bus helper named plasmaloginauthhelper in the KDE Plasma‑login‑manager can be misused by a compromised plasmalogin service account to call chown on arbitrary files within the system. This flaw effectively allows a process that normally has only limited privileges to alter file ownership, enabling an attacker to modify or replace critical system files, elevate permissions, or otherwise tamper with the operating environment. The vulnerability is a classic instance of vulnerable privilege management and carries an elevated risk to confidentiality, integrity, and availability.

The affected product is KDE’s Plasma‑login‑manager component. No specific product versions are listed in the available data, so any installation that includes the latest upstream plasmaloginauthhelper code may be vulnerable.

The CVSS score of 7 indicates a high severity. Although an EPSS score is not provided, the absence of KEV listing suggests no known current exploitation. The attack vector is inferred to be local; an attacker who already has access sufficient to compromise or abuse the plasmalogin service account can trigger the vulnerability. Consequently, systems where the plasmalogin service runs with elevated rights and the helper is enabled represent the highest risk, and the vulnerability can be leveraged to gain system‑wide control if the attacker has access to the implicated account.