vulnerability

Gentoo Linux: CVE-2022-41322: Kitty: Arbitrary Code Execution

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Sep 23, 2022
Added
Sep 30, 2022
Modified
Aug 13, 2025

Description

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.

Solution

gentoo-linux-upgrade-x11-terms-kitty
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.