Bug 504189

Summary: kscreenlocker allows clipboard paste in lock screen
Product: [Plasma] plasmashell Reporter: test user <excellentadversary>
Component: Screen lockingAssignee: Plasma Bugs List <plasma-bugs-null>
Status: RESOLVED DUPLICATE    
Severity: normal CC: cwo.kde, excellentadversary
Priority: NOR    
Version First Reported In: master   
Target Milestone: 1.0   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description test user 2025-05-14 02:00:26 UTC
SUMMARY

kscreenlocker password prompt enables anyone to paste clipboard or primary selection content in it. Clipboards can potentially include sensitive data (even passwords if copied from password manager) and should not be accessible to anyone from a locked computer.

STEPS TO REPRODUCE
1. copy some text
2. lock screen
3. press paste shortcut (ctrl +v usually) inside password box

OBSERVED RESULT

copied text pasted

EXPECTED RESULT

no text pasted

SOFTWARE/OS VERSIONS
all
Comment 1 cwo 2025-05-14 06:53:25 UTC
Thank you for the bug report! This issue is already being tracked; marking as a duplicate.

*** This bug has been marked as a duplicate of bug 503596 ***