Which versions of Kitty terminal are affected by EUVD-2026-36579?

Kitty terminal emulator versions before 0.47.3 contain a code injection vulnerability allowing attackers who control terminal output (SSH banners, log files, displayed content) to execute arbitrary…. A patch is available.

How to fix or mitigate EUVD-2026-36579?

24 hours: Inventory all systems running Kitty terminal emulator and document current versions. 7 days: Upgrade all Kitty installations to version 0.47.3 or later. 30 days: Verify upgrade completion via automated compliance scanning and document any systems where upgrade cannot be performed.

Kitty terminal EUVD-2026-36579

Q: What is the CVSS score of EUVD-2026-36579?

EUVD-2026-36579 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-54057 HIGH

Code Injection (CWE-94)

2026-06-12 GitHub_M

Code Injection RCE Kitty Suse

7.3

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local delivery of bytes to the terminal (AV:L), low complexity, no privileges on Kitty, requires user to view content and be at shell prompt (UI:R), full shell command execution yields C/I/A:H.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Patch available

Jun 12, 2026 - 22:01 EUVD

Analysis Generated

Jun 12, 2026 - 21:22 vuln.today

DescriptionCVE.org

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, into the shell's input without sanitization. Version 0.47.3 fixes the issue.

AnalysisAI

Code injection in Kitty terminal emulator versions prior to 0.47.3 allows attacker-controlled bytes - including newline characters - to be reflected back into the user's shell input via the OSC 21 (color-control) escape sequence query reply. An attacker who can cause arbitrary bytes to be written to the terminal (malicious file contents, SSH banner, log entry, web page) can inject and execute shell commands at the victim's privilege level. No public exploit identified at time of analysis, but the underlying class of terminal-escape-injection bugs is well documented and exploitation is straightforward once the unsanitized reply path is known.

Technical ContextAI

Kitty is a cross-platform, GPU-accelerated terminal emulator written by Kovid Goyal (CPE cpe:2.3:a:kovidgoyal:kitty). OSC (Operating System Command) sequences are part of the ANSI/ECMA-48 control protocol; OSC 21 is Kitty's color-control extension that lets applications query and set palette colors, with the terminal writing its reply back onto the pty as if the user had typed it. The flaw is a classic CWE-94 (Improper Control of Generation of Code) problem: the reply path echoes attacker-supplied bytes from the original query payload without stripping or escaping control characters such as CR/LF, so a newline injected into the query causes the shell to treat any following bytes as a fresh command line. This is the same vulnerability class as the historical iTerm2 and various xterm DCS/OSC injection bugs.

RemediationAI

Vendor-released patch: upgrade Kitty to version 0.47.3 or later, which sanitizes OSC 21 reply bytes; the fix and details are documented in the upstream advisory at https://github.com/kovidgoyal/kitty/security/advisories/GHSA-5gmr-9gwg-hhq6. If immediate patching is not possible, compensating controls include avoiding direct output of untrusted data to the terminal - pipe suspect files through a sanitizer such as cat -v, less -R with control-character filtering, or strings before viewing (trade-off: loses legitimate color/formatting); refusing to cat arbitrary log files, downloaded artifacts, or unknown SSH MOTD/banners; and disabling shell auto-execution on Enter where supported (e.g., zsh setopt NO_FLOW_CONTROL plus bracketed-paste-mode hardening, though this does not fully mitigate newline injection into a live prompt). The cleanest mitigation remains the upgrade.