High severity · published Aug 10, 2026
CVE-2026-72913
Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handle_remote_echo accepts printable shell command characters and handle_remote_ssh calls get_ssh_data in kittens/ssh/utils.py, which emits a newline; chaining the handlers can execute attacker-controlled commands when a user displays untrusted terminal data. This issue is fixed in version 0.48.2.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KI
kitty · kovidgoyal
< 0.48.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-72913
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-72913
github.com
https://github.com/kovidgoyal/kitty/commit/9dca948e9bec3c926ab3370f2cd10f9b9b10821f
github.com
https://github.com/kovidgoyal/kitty/releases/tag/v0.48.2
github.com
https://github.com/kovidgoyal/kitty/security/advisories/GHSA-ccp2-q4v6-rw94
sw.kovidgoyal.net
https://sw.kovidgoyal.net/kitty/changelog/#id1
More from kitty
9.8
CVE-2026-33642
Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check
9.8
CVE-2020-35605
The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be…
8.8
CVE-2026-42850
Kitty has a shell command injection
8.8
CVE-2026-33633
Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler
7.8
CVE-2026-54057
Kitty vulnerable to command injection via unsanitized OSC 21 query reply