EUVD-2026-36009Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
6DescriptionCVE.org
Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a malicious project file with a ghidra:// URL that, when opened via File → Open Project, deserializes untrusted objects using a Jython 2.7.4 gadget chain to execute arbitrary commands.
AnalysisAI
Remote code execution in NSA Ghidra before version 12.1 allows attackers to execute arbitrary commands when a user opens a malicious shared-project file containing a ghidra:// URL, triggering unsafe Java deserialization in the client-side Shared-Project RMI connection code. Exploitation leverages a Jython 2.7.4 gadget chain and requires only user interaction (opening the crafted project), with no authentication needed. No public exploit identified at time of analysis, though VulnCheck has published an advisory describing the flaw.
Technical ContextAI
Ghidra is the National Security Agency's open-source software reverse-engineering framework, widely used by malware analysts, vulnerability researchers, and security teams. The vulnerability is rooted in CWE-502 (Deserialization of Untrusted Data) within the Shared-Project feature, which uses Java RMI (Remote Method Invocation) to coordinate multi-user reverse-engineering projects via ghidra:// URLs. Because the RMI client deserialized incoming objects without filtering allowed classes, an attacker can supply a serialized payload that abuses gadgets present in the bundled Jython 2.7.4 interpreter to achieve arbitrary code execution in the analyst's JVM context. The CPE (cpe:2.3:a:nationalsecurityagency:ghidra) confirms all Ghidra distributions prior to 12.1 are affected.
RemediationAI
Vendor-released patch: upgrade to Ghidra 12.1 or later, which is available from the NationalSecurityAgency/ghidra GitHub releases and is referenced by the GitHub Security Advisory at https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-fgg5-g275-7742 and fixing commit 91a269103fe5d133c14ec3afa60280dccb94be5c. Until patched, treat any project file, archive, or ghidra:// URL from untrusted sources as malicious - do not open shared projects received via email, chat, or download from unverified locations, and avoid clicking ghidra:// links in browsers or documents. Additional compensating controls include running Ghidra in a sandboxed VM or container dedicated to analysis (trade-off: workflow friction and potential loss of host integration), blocking outbound RMI traffic (default TCP 1099 and ephemeral ports) at the host firewall if Shared-Project collaboration is not required (trade-off: breaks legitimate collaboration), and reviewing the VulnCheck advisory at https://www.vulncheck.com/advisories/ghidra-remote-code-execution-via-unfiltered-rmi-deserialization-in-shared-project-connection for indicators.
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading
NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files featu
NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a pro
NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. Ra
In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive)
Command injection in NSA Ghidra (versions before 12.0.3) executes arbitrary commands when analysts click on maliciously
SQL injection in Ghidra's BSim binary-similarity component (versions before 12.1) allows authenticated remote attackers
Authentication bypass in NSA Ghidra versions prior to 12.1 allows any holder of a valid CA-signed certificate to imperso
SQL injection in Ghidra's PostgreSQL collaboration backend (versions 11.0 through pre-12.1) allows authenticated users t
Command injection in Ghidra versions before 12.1 on Windows allows attackers to execute arbitrary OS commands under the
Arbitrary file write in NSA's Ghidra reverse-engineering framework before version 12.0.4 allows attackers to escape the
Arbitrary file write in NSA Ghidra versions prior to 12.0.2 allows local attackers to achieve code execution by tricking
Same weakness CWE-502 – Deserialization of Untrusted Data
View allShare
External POC / Exploit Code
Leaving vuln.today