Inkscape
Inkscape makes and edits drawings that stay sharp when resized, such as logos, diagrams and posters. It’s made by Inkscape.
Criminals have used its name in fake downloads or scams, so get it only from inkscape.org.
What it is
People use Inkscape to draw logos, icons, birthday cards, diagrams and posters. It saves drawings in SVG format, which describes shapes and lines so they can be resized without becoming blurry.
On a Mac, it can request access to Desktop, Documents and Downloads folders. This lets it work with drawing files stored there.
Inkscape is an established open-source drawing tool. Its official guide recommends downloading the Mac version from inkscape.org. A Mac privacy flaw affecting versions before 1.4.3 has been fixed.
Who makes it
Inkscape is an open-source software project founded in 2003 and a member of Software Freedom Conservancy. Its website is inkscape.org.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
HARD hasn’t yet recorded the signature on a real copy of Inkscape. Its Mac app shows who signed the copy you have.
Its bundle ID, the name macOS knows it by, is org.inkscape.Inkscape. Download it only from inkscape.org, not from an ad or a link someone sends you.
Fakes. In July 2018, researchers reported lookalike Inkscape download sites distributing copies bundled with InstallCore adware.
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Files and Folders | To access drawing files in Desktop, Documents and Downloads folders. |
Security record
Problems with Inkscape or Inkscape in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| CVE-2026-4980 disclosed that a specially made SVG could expose local files in Inkscape versions from 1.1 to before 1.3; version 1.3 fixed it. | ↗ | |
| CVE-2025-15523 let an attacker with local access use Inkscape’s bundled Python to read protected folders using permissions already granted to Inkscape; version 1.4.3 fixed it. | ↗ |
References
- Inkscape macOS application metadata gitlab.com
- Inkscape history wiki.inkscape.org
- Software Freedom Conservancy — Current Projects sfconservancy.org
- When do you need Inkscape? inkscape-manuals.readthedocs.io
- Installing Inkscape on a Mac inkscape-manuals.readthedocs.io
- Inkscape release notes wiki.inkscape.org
- Fake Websites for Keepass, 7Zip, Audacity, Others Found Pushing Adware bleepingcomputer.com
- Debian Security Tracker — CVE-2026-4980 security-tracker.debian.org
- CERT Polska — TCC Bypass vulnerability in Inkscape application for MacOS cert.pl