CVE-2026-52755
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to execute arbitrary code or modify sensitive files like .bashrc or .ssh/authorized_keys.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and modification of critical configuration files, posing a serious threat to the organization's security.
Recommendation
It is recommended to update Ghidra to version 12.0.4 or later to mitigate this vulnerability and to monitor systems for unauthorized changes to files.
Original NVD description (English source)
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to execute arbitrary code or modify sensitive files like .bashrc or .ssh/authorized_keys.