PT-2026-48412 · Ghidra · Ghidra

Prasanthsundararajan69 · Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-52752

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.0.2

Description The extension installer fails to validate ZIP entry names during extraction. This allows attackers to use traversal sequences, such as ../ in filenames, to write arbitrary files outside the intended directory, which can lead to code execution.

Recommendations Update to version 12.0.2.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-52752

Affected Products

Ghidra

References · 4

• 🔥 https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-jhc2-q7qf-9c25 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-52752 · Security Note
• https://vulncheck.com/advisories/ghidra-path-traversal-in-extension-installer-via-zip-entry-names · Note
• https://twitter.com/CVEnew/status/2064709814299594808 · Twitter Post