Threats Tagged 'ubuntu-cve-2026-95835'

A missing authorization vulnerability exists in the askpass escape code handler in kitty versions from 0.25.0 before 0.49.0. This flaw allows a local user other than the one running the terminal to capture text typed into a prompt displayed by kitty, including secrets such as passwords. The vulnerability arises because the handler does not verify ownership or permissions of a POSIX shared memory object used to exchange prompt data, enabling another local user to create a malicious shared memory object and read the victim's input. The prompt text can also overwrite warning lines due to lack of control character sanitization. Exploitation requires the attacker to cause specific bytes to be displayed by the victim's terminal. This issue does not require elevated privileges on the victim's account.