Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with traversal sequences like ../ in filenames to write arbitrary files outside the intended directory, enabling code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-52752 Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft … https://www.cve.org/CVERecord?id=CVE-2026-52752
Post summary
The post announces a path‑traversal flaw in Ghidra pre‑12.0.2 that allows attackers to craft malicious ZIP entries during extension installation, but provides no PoC, exploit, or mitigation details.
CVE-2026-52752 Path Traversal Vulnerability in Ghidra Extension Installer Before... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-52752 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces a path traversal vulnerability (CVE-2026-52752) in Ghidra’s Extension Installer, linking to a vulnerability details page, with no evidence of exploitation or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nsa | ghidra | - | - | - |