Kitty Project

Kitty

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-43929

Exploit
  • EPSS 0.02%
  • Published 20.04.2025 00:00:00
  • Last modified 24.04.2025 15:46:35

open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter).

7.8

CVE-2022-41322

Exploit
  • EPSS 5.08%
  • Published 23.09.2022 05:15:08
  • Last modified 01.06.2025 11:15:19

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.