plasma-login-manager, a new display manager component in KDE, contains a privileged D-Bus helper which suffers from defense-in-depth issues allowing the plasmalogin service user to escalate to root in various ways.