Security Advisory

CVE-2025-43929

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-20 00:00:00

Last updated 2025-04-21 13:49:36

Assigner mitre

State PUBLISHED

Description

open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter).

← Browse all CVEs View on cve.org ↗