CVE-2026-52755
Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import
- State
- Published
- Severity
- 8.4 High
- Published
- Jun 10, 2026
- Updated
- Jul 14, 2026
- Reserved
- Jun 8, 2026
Description
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to execute arbitrary code or modify sensitive files like .bashrc or .ssh/authorized_keys.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.4 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
ghidranationalsecurityagency |
|
References
- GitHub Security Advisory (GHSA-3r55-xjr4-jh8f)vendor-advisory
- https://www.vulncheck.com/advisories/ghidra-path-traversal-via-zip-slip-in-theme-importthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.