What’s Vulnerable › Products

Kovid Goyal kitty vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Kovid Goyal kitty version is affected

Latest Kovid Goyal kitty vulnerabilities

• CVE-2026-95835 — Missing ownership check on the shared memory object named by the kitty askpass escape code (CVSS 5.6)
• CVE-2026-95834 — Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer (CVSS 4.6)
• CVE-2026-80432 — Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop (CVSS 6.0)
• CVE-2026-80431 — Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process (CVSS 6.8)
• CVE-2026-80430 — Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory (CVSS 4.6)
• CVE-2026-95832 — Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell (CVSS 9.3)