CVE-2026-52756CWE-22

Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server

Medium · published June 10, 2026

CVSS v4.0
6.3
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to filesystem operations without validation. Remote attackers can connect to port 54321 and send crafted protobuf messages with traversal sequences to enumerate filesystem paths and probe arbitrary files.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00601 · 48.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-06-10T12:41Z
EPSS history
Timeline
  • 10 JUN 12:41Z
    Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server
    cvelistv5