Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the… (CVE-2026-95835)

The vulnerability in kitty (versions 0.25.0 up to but not including 0.49.0) is due to missing authorization checks in the askpass escape code handler. The function handle_remote_askpass() opens a POSIX shared memory object named in the escape code, parses a prompt, and writes the user's answer back without verifying that the shared memory object is owned by the user running kitty or that its permissions exclude other users. Unlike the ssh kitten component, this path lacks ownership and permission checks. An attacker with local access can create a shared memory object with permissive access, cause the victim's kitty terminal to display a prompt of the attacker's choosing, including a masked password prompt, and then read the victim's typed secret from the shared memory object. The prompt text is also displayed without sanitizing control characters, allowing overwriting of warning lines. This results in disclosure of secrets typed by the victim to another local user without requiring victim privilege escalation.

A local attacker can obtain sensitive information typed by another user into kitty's askpass prompt, including passwords or other secrets. This leads to confidentiality loss of sensitive input data without requiring elevated privileges on the victim's account. The attacker must be able to cause the victim's terminal to display attacker-controlled bytes to trigger the vulnerability. The vulnerability affects confidentiality but does not directly impact integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is applied, restrict local user access to the system to trusted users only. Monitor for unusual local activity that might attempt to exploit this vulnerability. Avoid running kitty in multi-user environments where untrusted local users exist. Follow vendor guidance once an official fix is released and apply updates promptly.