Critical Vulnerabilities in kitty Terminal Emulator Affect Multiple Ubuntu Releases

On June 17, 2026, Ubuntu announced security vulnerabilities in the kitty terminal emulator affecting several Ubuntu releases, including 26.04 LTS and earlier versions. Two critical issues were identified: CVE-2026-33633 and CVE-2026-33642, both published on May 19, 2026. These vulnerabilities allow attackers to exploit improperly handled image data and graphics commands, potentially causing denial of service or executing arbitrary code. Users are advised to update their systems to mitigate these risks. The affected versions include kitty 0.45.0-1ubuntu0.1~esm1 for Ubuntu 26.04 LTS and earlier versions down to 20.04 LTS. A system restart is required after applying the updates to ensure changes take effect.

Key Points: • Critical vulnerabilities in kitty affect multiple Ubuntu versions, including 26.04 LTS. • CVE-2026-33633 and CVE-2026-33642 allow denial of service and arbitrary code execution. • Users must update and restart kitty to mitigate these security issues.