CVE-2026-54056

Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote drag-and-drop source to overwrite or truncate arbitrary files writable by the local kitty user. Remote `text/uri-list` drops are staged in a temporary directory, but on case-sensitive filesystems duplicate remote basenames are not de-duplicated. An attacker can first create a staged symlink and then send a same-name regular-file entry. The regular-file write uses `utils.CreateAt()` / `openat(O_RDWR|O_CREAT|O_TRUNC)` without `O_NOFOLLOW`, so it follows the attacker-created symlink and writes outside the staging directory before final overwrite confirmation runs. This appears related in class to the file-transfer symlink advisory, but it is a different bug: it affects `kitten dnd` remote drag-and-drop staging, uses different vulnerable code (`kittens/dnd/drop.go` and `tools/utils/file_at_fd.go`), and reproduces on commit `4aa4a5c0567a92553a8c20a88a4352da637fca5d`, after the file-transfer `O_NOFOLLOW` fix. Version 0.47.2 patches the issue.

• CWE-59

• https://github.com/kovidgoyal/kitty/security/advisories/GHSA-r892-cv7q-fw8xExploit, Mitigation, Vendor Advisory
• https://github.com/kovidgoyal/kitty/security/advisories/GHSA-r892-cv7q-fw8xExploit, Mitigation, Vendor Advisory

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5404K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.…5.5
• CVE-2026-54040LibreChat is an enhanced ChatGPT clone that supports multipl…7.1
• CVE-2026-5405RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and…7.8
• CVE-2026-54051Network-AI is a TypeScript/Node.js multi-agent orchestrator.…9.9
• CVE-2026-54052n8n-MCP is an MCP server that provides AI assistants access …9.9
• CVE-2026-54055Kitty is a cross-platform GPU based terminal. In versions pr…5
• CVE-2026-54057Kitty is a cross-platform GPU based terminal. In versions pr…7.8
• CVE-2026-54058Pillow is a Python imaging library. Prior to 12.3.0, when Pi…9.1
• CVE-2026-54059Pillow is a Python imaging library. Prior to 12.3.0, PIL/Pcf…7.5
• CVE-2026-5406FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.…5.5
• CVE-2026-54060Pillow is a Python imaging library. Prior to 12.3.0, PIL/Fon…7.5
• CVE-2026-54061Dgraph is an open source distributed GraphQL database. Prior…9.1