CVE-2026-52754: Nsa Ghidra

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by presenting their public certificate with a null signature. Attackers can escalate privileges, modify repository access controls, exfiltrate shared reverse engineering databases, and permanently compromise server integrity.

Affected products

• Nsa Ghidra: before 12.1 (fixed in 12.1)

Published 2026-06-10. Last modified 2026-07-14.