ZDI-CAN-28906
HIGH 7.8
Upcoming
Feb 06, 2026
Krita
Krita is a popular open-source digital painting and illustration software application. This high-severity vulnerability requires local access and user interaction to exploit, but once triggered grants an attacker complete control over confidentiality, integrity, and availability of the affected system with no authentication required. Security teams should monitor for patch releases after the June 2026 vendor deadline and advise users to avoid opening untrusted files or projects in Krita until updates are available.
Advisory Details
Researcher
Anonymous
Reported
February 06, 2026
Deadline
June 06, 2026
51d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H