Kitty Project vulnerabilities
We track 2 vulnerabilities in Kitty Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2025.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Kitty Project vulnerabilities
- 7.8 High severity
kitty: Origin Validation Error
open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter).
- 7.8 High severity
Kitty: Improper Encoding or Escaping of Output
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.