PT-2026-34752 · Radware+2 · Radare2

Published 2026-04-23 · Updated 2026-04-24 · CVE-2026-6941

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.1.4

Description An issue in project notes handling allows attackers to read or write files outside the configured project directory. This occurs when importing a malicious .zrp archive containing a symlinked notes.txt file, which bypasses directory confinement checks and allows operations to access arbitrary files outside the dir.projects root directory. Path traversal is a technique where attackers use special characters or symlinks to access files and directories that are stored outside the intended folder.

Recommendations Update to version 6.1.4 or later.

Exploit

Fix

Path traversal

Link Following

Weakness Enumeration

CWE-22

CWE-59

Related Identifiers

CVE-2026-6941

Affected Products

Radare2

References · 7

• 🔥 https://github.com/radareorg/radare2/pull/25831 · Exploit
• https://github.com/radareorg/radare2/commit/4bcdee725ff0754ed721a98789c0af371c5f32a4 · Patch
• https://ubuntu.com/security/CVE-2026-6941 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6941 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-6941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-6941 · Security Note
• https://vulncheck.com/advisories/radare2-project-notes-path-traversal-via-symlink · Note