ZDI-CAN-28771 HIGH 7.8 Upcoming Feb 06, 2026

Krita

Krita is a popular open-source digital painting and illustration software application. This high-severity vulnerability requires local access and user interaction but requires no authentication, and once exploited grants an attacker high-level control over confidentiality, integrity, and system availability. Security teams should monitor for patches following the June 2026 vendor deadline and be alert to potential exploitation attempts targeting Krita users, particularly those working with untrusted files or projects.

Advisory Details
Researcher Anonymous
Reported February 06, 2026
Deadline June 06, 2026 51d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy