VULNERABILITY INTELLIGENCE

CVE-2026-95832

CVSS score9.3 CRITICAL

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-09-25

Last modified2026-09-29

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because color_control() in kitty/window.py a…