Platform
linux
Component
messagelib
Fixed in
25.11.90
CVE-2025-69412 is a security vulnerability affecting KDE messagelib versions prior to 25.11.90. The vulnerability stems from an oversight where SSL errors are ignored during communication with the Google Safe Browsing Lookup API. This could allow an attacker to potentially spoof threat data, though the API is not enabled by default. A fix is available in version 25.11.90.
The primary impact of CVE-2025-69412 lies in the potential for threat data spoofing. If an attacker can successfully intercept and manipulate the communication with the Google Safe Browsing Lookup API, they could present false positive or false negative threat assessments. This could lead users to believe a legitimate website is malicious, or conversely, that a malicious website is safe. While the API is not enabled by default in KDE messagelib's configuration, systems that have explicitly enabled it are at risk. The severity is rated as LOW due to the API's default disabled state and the complexity of successfully exploiting the vulnerability.
CVE-2025-69412 was publicly disclosed on 2025-12-31. As of this date, there are no known public proof-of-concept exploits available. The vulnerability is not currently listed on the CISA KEV catalog. The low CVSS score reflects the API's default disabled state and the complexity of exploitation.
Exploit Status
EPSS
0.01% (1% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-69412 is to upgrade KDE messagelib to version 25.11.90 or later. This version includes a fix that properly handles SSL errors during communication with the Google Safe Browsing Lookup API. If upgrading is not immediately feasible, consider disabling the Google Safe Browsing Lookup API within the KDE messagelib configuration. This will prevent the vulnerable code from being executed. Verify the upgrade by checking the messagelib version after installation using kde messagelib --version.
Update KDE messagelib to version 25.11.90 or later. This version fixes the SSL error omission vulnerability when using the Google Safe Browsing Lookup API. The update prevents potential threat data spoofing.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-69412 is a vulnerability in KDE messagelib where SSL errors are ignored when using the Google Safe Browsing Lookup API, potentially allowing threat data spoofing.
You are affected if you use KDE messagelib versions 0.0–25.11.80 and have the Google Safe Browsing Lookup API enabled in your configuration.
Upgrade KDE messagelib to version 25.11.90 or later. Alternatively, disable the Google Safe Browsing Lookup API in your configuration.
As of the public disclosure date, there are no known active exploits or campaigns targeting CVE-2025-69412.
Refer to the official KDE security advisory for CVE-2025-69412 on the KDE security announcements website.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.