A vulnerability was found in KDE KCoreAddons up to 6.24. It has been rated as critical. This affects the function
sendInput. The manipulation leads to improper neutralization of escape, meta, or control sequences.
This vulnerability is listed as CVE-2026-41526. The attack must be carried out locally. There is no available exploit.
Upgrading the affected component is advised.
