Kitty Project Kitty vulnerabilities

2 vulnerabilities

Known vulnerabilities in Kitty Project Kitty, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2025-43929debiankitty+3
EPSS score
0.19%
open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter).7.8CVE-2022-41322debiankitty+4
EPSS score
0.54%
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.