PT-2026-48415 · Ghidra · Ghidra

Prasanthsundararajan69 · CVE-2026-52755 · Published 2026-06-10 · Updated 2026-06-10

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.0.4

Description A path traversal issue exists in the theme import functionality. This allows attackers to write files outside the intended theme directory by using malicious theme ZIP files containing traversal sequences in filenames. This can lead to the modification of sensitive files, such as .bashrc or .ssh/authorized keys, or the execution of arbitrary code.

Recommendations Update to version 12.0.4 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-52755

GHSA-3R55-XJR4-JH8F

Affected Products

Ghidra

References · 8

• 🔥 https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-3r55-xjr4-jh8f · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52755.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-52755 · Security Note
• https://osv.dev/vulnerability/CVE-2026-52755 · Vendor Advisory
• https://github.com/nationalsecurityagency/ghidra · Note
• https://vulncheck.com/advisories/ghidra-path-traversal-via-zip-slip-in-theme-import · Note
• https://t.me/CVEtracker/56449 · Telegram Post
• https://twitter.com/CVEnew/status/2064709809711014335 · Twitter Post