ZDI-CAN-28771
HIGH 7.8
Upcoming
Feb 06, 2026
Krita
Krita is a popular open-source digital painting and illustration software application. This high-severity vulnerability requires local access and user interaction but requires no authentication, and once exploited grants an attacker high-level control over confidentiality, integrity, and system availability. Security teams should monitor for patches following the June 2026 vendor deadline and be alert to potential exploitation attempts targeting Krita users, particularly those working with untrusted files or projects.
Advisory Details
Researcher
Anonymous
Reported
February 06, 2026
Deadline
June 06, 2026
51d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H