Vulnerability DatabaseCVE-2026-52751
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-52751
Published:June 10, 2026
Updated:August 04, 2026
Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a malicious project file with a ghidra:// URL that, when opened via File → Open Project, deserializes untrusted objects using a Jython 2.7.4 gadget chain to execute arbitrary commands.
Affected Packages
https://github.com/NationalSecurityAgency/ghidra.git (GITHUB):
Affected version(s) >=Ghidra_9.1_build <Ghidra_12.1_build
Fix Suggestion:
Update to version Ghidra_12.1_build
Related Resources (6)
https://www.vulncheck.com/advisories/ghidra-remote-code-execution-via-unfiltered-rmi-deserialization-in-shared-project-connection
https://nvd.nist.gov/vuln/detail/CVE-2026-52751
https://github.com/NationalSecurityAgency/ghidra/commit/91a269103fe5d133c14ec3afa60280dccb94be5c
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52751.json
https://github.com/nationalsecurityagency/ghidra
https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-fgg5-g275-7742
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
ACTIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Deserialization of Untrusted Data
CWE-502
EPSS
Base Score:
0.71