<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: kovidgoyal-kitty</title><description>Every new CVE for kovidgoyal-kitty.</description><link>https://agentprime.io/</link><item><title>CVE-2026-72913: Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences</title><link>https://agentprime.io/advisories/CVE-2026-72913/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-72913/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 21:07:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54057: Kitty vulnerable to command injection via unsanitized OSC 21 query reply</title><link>https://agentprime.io/advisories/CVE-2026-54057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54057/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 20:07:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54056: Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging</title><link>https://agentprime.io/advisories/CVE-2026-54056/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54056/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 20:06:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54055: Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol</title><link>https://agentprime.io/advisories/CVE-2026-54055/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54055/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 20:03:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42851: @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE</title><link>https://agentprime.io/advisories/CVE-2026-42851/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42851/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 20:00:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42850: Kitty has a shell command injection</title><link>https://agentprime.io/advisories/CVE-2026-42850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42850/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jun 2026 19:59:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33642: Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check</title><link>https://agentprime.io/advisories/CVE-2026-33642/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33642/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 18:04:42 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-33633: Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler</title><link>https://agentprime.io/advisories/CVE-2026-33633/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33633/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 17:36:07 GMT</pubDate><category>CVE</category></item></channel></rss>