The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.