CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-42851

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to write bytes to a kitty terminal — a remote SSH peer, a downloaded file viewed with `cat`, a log line, an email body rendered in `less`, an issue body in a TUI, etc. — can cause kitty to execute attacker-supplied Python inside the running kitty process, with the user's full privileges. There is no approval prompt, no remote-control permission requirement, no shell-integration interaction, no clipboard touch, and no editor interaction. Version 0.47.0 fixes the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 2.5%

CVSS Severity

CVSS v3 Score 7.8

References

https://github.com/kovidgoyal/kitty/security/advisories/GHSA-w98g-hpvr-r332

Products affected by CVE-2026-42851

Kovidgoyal » Kitty » Version: 0.1.0

cpe:2.3:a:kovidgoyal:kitty:0.1.0
Kovidgoyal » Kitty » Version: 0.10.0

cpe:2.3:a:kovidgoyal:kitty:0.10.0
Kovidgoyal » Kitty » Version: 0.10.1

cpe:2.3:a:kovidgoyal:kitty:0.10.1
Kovidgoyal » Kitty » Version: 0.11.0

cpe:2.3:a:kovidgoyal:kitty:0.11.0
Kovidgoyal » Kitty » Version: 0.11.1

cpe:2.3:a:kovidgoyal:kitty:0.11.1
Kovidgoyal » Kitty » Version: 0.11.2

cpe:2.3:a:kovidgoyal:kitty:0.11.2
Kovidgoyal » Kitty » Version: 0.11.3

cpe:2.3:a:kovidgoyal:kitty:0.11.3
Kovidgoyal » Kitty » Version: 0.12.0

cpe:2.3:a:kovidgoyal:kitty:0.12.0
Kovidgoyal » Kitty » Version: 0.12.1

cpe:2.3:a:kovidgoyal:kitty:0.12.1
Kovidgoyal » Kitty » Version: 0.12.2

cpe:2.3:a:kovidgoyal:kitty:0.12.2
Kovidgoyal » Kitty » Version: 0.12.3

cpe:2.3:a:kovidgoyal:kitty:0.12.3
Kovidgoyal » Kitty » Version: 0.13.0

cpe:2.3:a:kovidgoyal:kitty:0.13.0
Kovidgoyal » Kitty » Version: 0.13.1

cpe:2.3:a:kovidgoyal:kitty:0.13.1
Kovidgoyal » Kitty » Version: 0.13.2

cpe:2.3:a:kovidgoyal:kitty:0.13.2
Kovidgoyal » Kitty » Version: 0.13.3

cpe:2.3:a:kovidgoyal:kitty:0.13.3
Kovidgoyal » Kitty » Version: 0.14.0

cpe:2.3:a:kovidgoyal:kitty:0.14.0
Kovidgoyal » Kitty » Version: 0.14.1

cpe:2.3:a:kovidgoyal:kitty:0.14.1
Kovidgoyal » Kitty » Version: 0.14.2

cpe:2.3:a:kovidgoyal:kitty:0.14.2
Kovidgoyal » Kitty » Version: 0.14.3

cpe:2.3:a:kovidgoyal:kitty:0.14.3
Kovidgoyal » Kitty » Version: 0.14.4

cpe:2.3:a:kovidgoyal:kitty:0.14.4
Kovidgoyal » Kitty » Version: 0.14.5

cpe:2.3:a:kovidgoyal:kitty:0.14.5
Kovidgoyal » Kitty » Version: 0.14.6

cpe:2.3:a:kovidgoyal:kitty:0.14.6
Kovidgoyal » Kitty » Version: 0.15.0

cpe:2.3:a:kovidgoyal:kitty:0.15.0
Kovidgoyal » Kitty » Version: 0.15.1

cpe:2.3:a:kovidgoyal:kitty:0.15.1
Kovidgoyal » Kitty » Version: 0.16.0

cpe:2.3:a:kovidgoyal:kitty:0.16.0
Kovidgoyal » Kitty » Version: 0.17.0

cpe:2.3:a:kovidgoyal:kitty:0.17.0
Kovidgoyal » Kitty » Version: 0.17.1

cpe:2.3:a:kovidgoyal:kitty:0.17.1
Kovidgoyal » Kitty » Version: 0.17.2

cpe:2.3:a:kovidgoyal:kitty:0.17.2
Kovidgoyal » Kitty » Version: 0.17.3

cpe:2.3:a:kovidgoyal:kitty:0.17.3
Kovidgoyal » Kitty » Version: 0.17.4

cpe:2.3:a:kovidgoyal:kitty:0.17.4
Kovidgoyal » Kitty » Version: 0.18.0

cpe:2.3:a:kovidgoyal:kitty:0.18.0
Kovidgoyal » Kitty » Version: 0.18.1

cpe:2.3:a:kovidgoyal:kitty:0.18.1
Kovidgoyal » Kitty » Version: 0.18.2

cpe:2.3:a:kovidgoyal:kitty:0.18.2
Kovidgoyal » Kitty » Version: 0.18.3

cpe:2.3:a:kovidgoyal:kitty:0.18.3
Kovidgoyal » Kitty » Version: 0.19.3

cpe:2.3:a:kovidgoyal:kitty:0.19.3
Kovidgoyal » Kitty » Version: 0.2.0

cpe:2.3:a:kovidgoyal:kitty:0.2.0
Kovidgoyal » Kitty » Version: 0.2.1

cpe:2.3:a:kovidgoyal:kitty:0.2.1
Kovidgoyal » Kitty » Version: 0.2.2

cpe:2.3:a:kovidgoyal:kitty:0.2.2
Kovidgoyal » Kitty » Version: 0.2.3

cpe:2.3:a:kovidgoyal:kitty:0.2.3
Kovidgoyal » Kitty » Version: 0.2.4

cpe:2.3:a:kovidgoyal:kitty:0.2.4
Kovidgoyal » Kitty » Version: 0.2.5

cpe:2.3:a:kovidgoyal:kitty:0.2.5
Kovidgoyal » Kitty » Version: 0.2.6

cpe:2.3:a:kovidgoyal:kitty:0.2.6
Kovidgoyal » Kitty » Version: 0.2.7

cpe:2.3:a:kovidgoyal:kitty:0.2.7
Kovidgoyal » Kitty » Version: 0.2.8

cpe:2.3:a:kovidgoyal:kitty:0.2.8
Kovidgoyal » Kitty » Version: 0.28.0

cpe:2.3:a:kovidgoyal:kitty:0.28.0
Kovidgoyal » Kitty » Version: 0.28.1

cpe:2.3:a:kovidgoyal:kitty:0.28.1
Kovidgoyal » Kitty » Version: 0.29.0

cpe:2.3:a:kovidgoyal:kitty:0.29.0
Kovidgoyal » Kitty » Version: 0.29.1

cpe:2.3:a:kovidgoyal:kitty:0.29.1
Kovidgoyal » Kitty » Version: 0.29.2

cpe:2.3:a:kovidgoyal:kitty:0.29.2
Kovidgoyal » Kitty » Version: 0.3.0

cpe:2.3:a:kovidgoyal:kitty:0.3.0
Kovidgoyal » Kitty » Version: 0.30.0

cpe:2.3:a:kovidgoyal:kitty:0.30.0
Kovidgoyal » Kitty » Version: 0.30.1

cpe:2.3:a:kovidgoyal:kitty:0.30.1
Kovidgoyal » Kitty » Version: 0.31.0

cpe:2.3:a:kovidgoyal:kitty:0.31.0
Kovidgoyal » Kitty » Version: 0.32.0

cpe:2.3:a:kovidgoyal:kitty:0.32.0
Kovidgoyal » Kitty » Version: 0.32.1

cpe:2.3:a:kovidgoyal:kitty:0.32.1
Kovidgoyal » Kitty » Version: 0.32.2

cpe:2.3:a:kovidgoyal:kitty:0.32.2
Kovidgoyal » Kitty » Version: 0.33.0

cpe:2.3:a:kovidgoyal:kitty:0.33.0
Kovidgoyal » Kitty » Version: 0.33.1

cpe:2.3:a:kovidgoyal:kitty:0.33.1
Kovidgoyal » Kitty » Version: 0.34.0

cpe:2.3:a:kovidgoyal:kitty:0.34.0
Kovidgoyal » Kitty » Version: 0.34.1

cpe:2.3:a:kovidgoyal:kitty:0.34.1
Kovidgoyal » Kitty » Version: 0.35.0

cpe:2.3:a:kovidgoyal:kitty:0.35.0
Kovidgoyal » Kitty » Version: 0.35.1

cpe:2.3:a:kovidgoyal:kitty:0.35.1
Kovidgoyal » Kitty » Version: 0.35.2

cpe:2.3:a:kovidgoyal:kitty:0.35.2
Kovidgoyal » Kitty » Version: 0.36.0

cpe:2.3:a:kovidgoyal:kitty:0.36.0
Kovidgoyal » Kitty » Version: 0.36.1

cpe:2.3:a:kovidgoyal:kitty:0.36.1
Kovidgoyal » Kitty » Version: 0.36.2

cpe:2.3:a:kovidgoyal:kitty:0.36.2
Kovidgoyal » Kitty » Version: 0.36.3

cpe:2.3:a:kovidgoyal:kitty:0.36.3
Kovidgoyal » Kitty » Version: 0.36.4

cpe:2.3:a:kovidgoyal:kitty:0.36.4
Kovidgoyal » Kitty » Version: 0.37.0

cpe:2.3:a:kovidgoyal:kitty:0.37.0
Kovidgoyal » Kitty » Version: 0.38.0

cpe:2.3:a:kovidgoyal:kitty:0.38.0
Kovidgoyal » Kitty » Version: 0.38.1

cpe:2.3:a:kovidgoyal:kitty:0.38.1
Kovidgoyal » Kitty » Version: 0.39.0

cpe:2.3:a:kovidgoyal:kitty:0.39.0
Kovidgoyal » Kitty » Version: 0.39.1

cpe:2.3:a:kovidgoyal:kitty:0.39.1
Kovidgoyal » Kitty » Version: 0.4.0

cpe:2.3:a:kovidgoyal:kitty:0.4.0
Kovidgoyal » Kitty » Version: 0.4.1

cpe:2.3:a:kovidgoyal:kitty:0.4.1
Kovidgoyal » Kitty » Version: 0.4.2

cpe:2.3:a:kovidgoyal:kitty:0.4.2
Kovidgoyal » Kitty » Version: 0.40.0

cpe:2.3:a:kovidgoyal:kitty:0.40.0
Kovidgoyal » Kitty » Version: 0.40.1

cpe:2.3:a:kovidgoyal:kitty:0.40.1
Kovidgoyal » Kitty » Version: 0.41.0

cpe:2.3:a:kovidgoyal:kitty:0.41.0
Kovidgoyal » Kitty » Version: 0.41.1

cpe:2.3:a:kovidgoyal:kitty:0.41.1
Kovidgoyal » Kitty » Version: 0.42.0

cpe:2.3:a:kovidgoyal:kitty:0.42.0
Kovidgoyal » Kitty » Version: 0.42.1

cpe:2.3:a:kovidgoyal:kitty:0.42.1
Kovidgoyal » Kitty » Version: 0.42.2

cpe:2.3:a:kovidgoyal:kitty:0.42.2
Kovidgoyal » Kitty » Version: 0.43.0

cpe:2.3:a:kovidgoyal:kitty:0.43.0
Kovidgoyal » Kitty » Version: 0.43.1

cpe:2.3:a:kovidgoyal:kitty:0.43.1
Kovidgoyal » Kitty » Version: 0.44.0

cpe:2.3:a:kovidgoyal:kitty:0.44.0
Kovidgoyal » Kitty » Version: 0.45.0

cpe:2.3:a:kovidgoyal:kitty:0.45.0
Kovidgoyal » Kitty » Version: 0.46.0

cpe:2.3:a:kovidgoyal:kitty:0.46.0
Kovidgoyal » Kitty » Version: 0.46.1

cpe:2.3:a:kovidgoyal:kitty:0.46.1
Kovidgoyal » Kitty » Version: 0.46.2

cpe:2.3:a:kovidgoyal:kitty:0.46.2
Kovidgoyal » Kitty » Version: 0.5.0

cpe:2.3:a:kovidgoyal:kitty:0.5.0
Kovidgoyal » Kitty » Version: 0.5.1

cpe:2.3:a:kovidgoyal:kitty:0.5.1
Kovidgoyal » Kitty » Version: 0.6.0

cpe:2.3:a:kovidgoyal:kitty:0.6.0
Kovidgoyal » Kitty » Version: 0.6.1

cpe:2.3:a:kovidgoyal:kitty:0.6.1
Kovidgoyal » Kitty » Version: 0.7.0

cpe:2.3:a:kovidgoyal:kitty:0.7.0
Kovidgoyal » Kitty » Version: 0.7.1

cpe:2.3:a:kovidgoyal:kitty:0.7.1
Kovidgoyal » Kitty » Version: 0.8.0

cpe:2.3:a:kovidgoyal:kitty:0.8.0
Kovidgoyal » Kitty » Version: 0.8.1

cpe:2.3:a:kovidgoyal:kitty:0.8.1
Kovidgoyal » Kitty » Version: 0.8.2

cpe:2.3:a:kovidgoyal:kitty:0.8.2
Kovidgoyal » Kitty » Version: 0.8.3

cpe:2.3:a:kovidgoyal:kitty:0.8.3
Kovidgoyal » Kitty » Version: 0.8.4

cpe:2.3:a:kovidgoyal:kitty:0.8.4
Kovidgoyal » Kitty » Version: 0.9.0

cpe:2.3:a:kovidgoyal:kitty:0.9.0
Kovidgoyal » Kitty » Version: 0.9.1

cpe:2.3:a:kovidgoyal:kitty:0.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-42851

Products

Pricing

Contact Us