CVE-2026-42850

CVE-2026-42850

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will make kitty return an error, this error is not escaped and will…

Vulnerability class: Command Injection (OS Command Injection)

Weakness classification (CWE)

References