0xBenCantCode/CVE-2025-43929

PoC

High severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances.

view exploit source poc_in_githubauthor 0xBenCantCodepublished 2025-04-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-43929US	high7.8	0.19% (9th)	Exploit	2025-04-20
open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a docum…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.