Kitty vulnerabilities

2 known vulnerabilities in Kitty from Kitty Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  kitty: Origin Validation Error

  CVE-2025-43929Apr 20, 2025Kitty Project

  open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter).

• 7.8 High severity

  Kitty: Improper Encoding or Escaping of Output

  CVE-2022-41322Sep 23, 2022Kitty Project

  In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.