ZDI-CAN-28646
HIGH 7.8
Upcoming
Dec 24, 2025
Krita
Krita is a popular open-source digital painting and illustration software used by artists and designers. This high-severity vulnerability requires local access and user interaction to exploit, but once triggered it grants an attacker high-level permissions to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting Krita users and prepare patches once the vendor releases a fix by April 23, 2026.
Advisory Details
Researcher
Discovered by:
Anonymous
Reported
December 24, 2025
Deadline
April 23, 2026
6d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H