diff --git a/modules/misc/qt/kconfig.nix b/modules/misc/qt/kconfig.nix
index 9c8260d85..58b776749 100644
--- a/modules/misc/qt/kconfig.nix
+++ b/modules/misc/qt/kconfig.nix
@@ -74,8 +74,8 @@ in
               lib.mapAttrsToList (group: value: toLine file (path ++ [ group ]) value) value
             else
               "run ${pkgs.kdePackages.kconfig}/bin/kwriteconfig6 --file '${configHome}/${file}' ${
-                lib.concatMapStringsSep " " (x: "--group ${x}") (lib.lists.init path)
-              } --key '${lib.lists.last path}' ${toValue value}";
+                lib.concatMapStringsSep " " (x: "--group ${lib.escapeShellArg x}") (lib.lists.init path)
+              } --key ${lib.escapeShellArg (lib.lists.last path)} ${toValue value}";
           lines = lib.flatten (lib.mapAttrsToList (file: attrs: toLine file [ ] attrs) cfg);
         in
         builtins.concatStringsSep "\n" lines