CyberRota Analysis
AI-GeneratedThe vulnerability in Kitty affects the @kitty-echo and @kitty-ssh DCS handlers, allowing unauthenticated data to be written to the child shell's stdin, which can lead to the execution of attacker-controlled commands when untrusted terminal data is displayed. This poses a significant risk to users who rely on Kitty for terminal operations, particularly in environments where untrusted data is processed. Organizations using versions prior to 0.48.2 should prioritize updating to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handle_remote_echo accepts printable shell command characters and handle_remote_ssh calls get_ssh_data in kittens/ssh/utils.py, which emits a newline; chaining the handlers can execute attacker-controlled commands when a user displays untrusted terminal data. This issue is fixed in version 0.48.2.