CVE-2026-80430

The kitty terminal emulator (versions 0.47.0 before 0.49.0 ) is vulnerable to an improper link resolution flaw in its drag and drop protocol. The root cause lies in subdir_data_for_drag() within kitty/dnd.c, which constructs path strings instead of walking the tree component by component. This al...