Product by Kovidgoyal
Kovidgoyal Kitty
10 known vulnerabilities in Kovidgoyal Kitty (Kovidgoyal), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-35605 | Kovidgoyal Kitty: Code Execution | 9.8 | |
| Critical | CVE-2026-33642 | Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check | 9.9 | |
| High | CVE-2026-42850 | Kitty has a shell command injection | 8.8 | |
| High | CVE-2026-33633 | Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler | 7.5 | |
| High | CVE-2026-72913 | Kovidgoyal Kitty: Improper Neutralization of Escape, Meta, or Control Sequences | — | |
| High | CVE-2026-54057 | Kitty vulnerable to command injection via unsanitized OSC 21 query reply | 7.8 | |
| High | CVE-2026-42851 | @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE | 7.8 | |
| High | CVE-2026-54056 | Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging | 7.1 | |
| Medium | CVE-2026-54055 | Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol | 5.0 | |
| High | CVE-2025-43929 | Kitty: Origin Validation Error | 4.1 |