ZDI-CAN-28517
HIGH 7.8
Overdue
Dec 04, 2025
Krita
Krita is a well-known open-source digital painting and illustration software application. This vulnerability has a high severity rating (7.8) and requires local access with user interaction to exploit, but once successful grants an attacker high-level permissions to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for any unusual file access or execution behavior from Krita and ensure users update to patched versions once available, with a vendor deadline of April 3, 2026.
Advisory Details
Researcher
Discovered by:
Francis Provencher {PRL}
Reported
December 04, 2025
Deadline
April 03, 2026
14d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H