Hex Rays · Ida Pro · CVE-2026-45181
**Name of the Vulnerable Software and Affected Versions**
Hex-Rays IDA Pro versions 9.2 through 9.3
Hex-Rays IDA Pro versions prior to 9.3sp2
**Description**
An argument injection flaw exists where the software fails to block Clang dependency-file generation. This allows an attacker to place malicious code into a plugins directory if a victim opens a specially crafted `.i64` file.
**Recommendations**
Update Hex-Rays IDA Pro to version 9.3sp2 or later.