CVE-2022-41322

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p41

Published

Sep 23, 2022 (Sep 23, 2022)

Modified

Jun 17, 2026

Description

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.

Vendors: kitty project fedoraproject
Products: kitty, fedora
Weakness: CWE-116
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.