ZDI-CAN-28656
HIGH 7.8
Upcoming
Dec 24, 2025
Krita
Krita is a popular open-source digital painting and illustration software. This high-severity vulnerability requires local access with user interaction but requires no authentication, and successfully exploiting it could allow an attacker to read sensitive data, modify files, or crash the application. Security teams should monitor for patches from Krita and be alert for suspicious activity on systems running the software, particularly if users have been socially engineered into opening malicious files.
Advisory Details
Researcher
Discovered by:
Anonymous
Reported
December 24, 2025
Deadline
April 23, 2026
6d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H