ZDI-CAN-28785
HIGH 7.8
Upcoming
Feb 06, 2026
Krita
Krita is a popular open-source digital painting and illustration software. This high-severity vulnerability requires local access and user interaction to exploit, but once triggered it grants an attacker high-level control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches following the June 2026 vendor deadline and consider restricting file execution from untrusted sources in Krita until an update is available.
Advisory Details
Researcher
Anonymous
Reported
February 06, 2026
Deadline
June 06, 2026
51d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H