EUVD-2026-77465
GHSA-24hx-44cp-gqfx
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Delivered over the network but triggered only when a user extracts a malicious pack (UI:R); arbitrary file write gives I:H and possible file overwrite gives A:L, while a write primitive yields no direct confidentiality (C:N).
Primary rating from Vendor (eclipse).
CVSS VectorVendor: eclipse
Lifecycle Timeline
5DescriptionCVE.org
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.
AnalysisAI
Arbitrary file write in Eclipse Embedded CDT 6.0 through 6.7 lets a maliciously crafted CMSIS-Pack archive escape its intended extraction directory and drop files anywhere on the developer's disk. When a user installs or extracts a compromised pack, the plugin's archive handler fails to sanitize entry paths (a classic Zip-Slip-style path traversal), allowing an attacker who controls the pack contents to overwrite or plant arbitrary files. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to install or extract an attacker-controlled or compromised CMSIS-Pack archive within Eclipse Embedded CDT versions 6.0.0 through 6.7.x; the specific enabling feature is the CMSIS-Pack extraction routine that processes .pack archive entries. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Eclipse Embedded CDT to version 6.8.0 or later, which is the first release outside the affected 6.0.0-<6.8.0 range and contains the vendor patch (see GHSA-qch4-8rmp-mjx3). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running Eclipse Embedded CDT versions 6.0-6.7 and notify affected development teams. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today