CVE-2026-52349

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.

Published 2026-07-20. Last modified 2026-07-23.