CVE-2026-45184

MEDIUM

Kdenlive < 26.04.1 - Inclusion of Functionality from Untrusted Control Sphere via Proxy Parameters

Title source: llm

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.

Core 3

Core References

CVSS v3 6.5

EPSS 0.0001

EPSS Percentile 0.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-829

Status published

Products (1)

KDE/Kdenlive < 26.04.1

Published May 09, 2026

Tracked Since May 10, 2026