[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 Bug Janitor Service changed: What|Removed |Added Resolution|WAITINGFORINFO |WORKSFORME Status|NEEDSINFO |RESOLVED --- Comment #6 from Bug Janitor Service --- 🐛🧹 This bug has been in NEEDSINFO status with no change for at least 30 days. Closing as RESOLVED WORKSFORME. -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 --- Comment #5 from Bug Janitor Service --- 🐛🧹 ⚠️ This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information, then set the bug status to REPORTED. If there is no change for at least 30 days, it will be automatically closed as RESOLVED WORKSFORME. For more information about our bug triaging procedures, please read https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging. Thank you for helping us make KDE software even better for everyone! -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 vanyossi changed: What|Removed |Added Status|REPORTED|NEEDSINFO Resolution|--- |WAITINGFORINFO --- Comment #4 from vanyossi --- ok, ran the test using sandboxed krita.app (from the store) this are the results daedalus@dinamus:krita/test_files/task_allow $ ./inject_krita 2025-07-11 14:10:47.248 inject_krita[38057:3650901] [*] Searching for Krita process... 2025-07-11 14:10:47.258 inject_krita[38057:3650901] [+] Found Krita with PID: 37960 2025-07-11 14:10:47.258 inject_krita[38057:3650901] [+] Attempting to get task port... 2025-07-11 14:10:47.258 inject_krita[38057:3650901] [-] Failed to get task for pid 37960: 5 (0x5) The entitlement does not break the sandbox. however it also does not work running krita installed from our website, neither running any dev build. I followed the exact steps from this report. What could be missing? -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 vanyossi changed: What|Removed |Added CC||[email protected] --- Comment #3 from vanyossi --- Does this vulnerability works on krita from the macStore or only works (or was tested) for krita downloaded from krita.org? -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 --- Comment #2 from Victor Souza --- (In reply to Halla Rempt from comment #1) > We don't use xcode to developer Krita, of course... This entitlement was > added to make it possible for users to generate backtraces for bug reports. > I'm really not sure why this should be a "vulnerability" given that you're > already executing code at the same privilege level as Krita, too, on the > same system? Hi Halla, I totally understand what you mean. It turns out that on macOS, by default, it's common for an application to only run what's in its sandbox. Even if the attacker already has local privileges, using this entitlement significantly lowers the barrier to escalating the attack to other trusted processes (like Krita), and can be combined with other techniques to exploit user data, abuse UI spoofing, keylogging, etc. I think it's important because it's not just theoretical; the BlueNoroff APT recently used this same technique, which can be read about in the Huntress article: https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 --- Comment #1 from Halla Rempt --- We don't use xcode to developer Krita, of course... This entitlement was added to make it possible for users to generate backtraces for bug reports. I'm really not sure why this should be a "vulnerability" given that you're already executing code at the same privilege level as Krita, too, on the same system? -- You are receiving this mail because: You are watching all bug changes.
[krita] [Bug 506889] Task injection vulnerability in Krita
https://bugs.kde.org/show_bug.cgi?id=506889 Halla Rempt changed: What|Removed |Added CC||[email protected] Severity|major |normal -- You are receiving this mail because: You are watching all bug changes.
