CVE-2026-52752: Nsa Ghidra

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with traversal sequences like ../ in filenames to write arbitrary files outside the intended directory, enabling code execution.

Affected products

• Nsa Ghidra: before 12.0.2 (fixed in 12.0.2)

Published 2026-06-10. Last modified 2026-07-14.