Ghidra EUVD-2026-108333

Exploitation requires a user to be persuaded to download and install a maliciously crafted Ghidra extension ZIP archive through Ghidra's extension installer (which calls ExtensionUtils.unzipToInstallationFolder, extracting into ~/.config/ghidra/ghidra*/Extensions). No authentication or special privileges are needed (PR:N), and all versions before 12.2 are vulnerable in their default configuration because there was no cap on the number of extracted entries. The decisive limiting factor is the required user interaction (UI:P) plus local access (AV:L): an attacker cannot trigger this remotely or without the victim actively installing the archive. The fix introduces a default limit of 3000 entries (MAX_ZIP_ENTRIES_DEFAULT), overridable via the ghidra.extensions.maxfiles.override system property; the complete fix is upgrading to 12.2.

This is a medium-severity (CVSS 6.8) availability-only flaw, and the aggregated signals consistently point to a low-to-moderate real-world priority rather than an emergency. The CVSS 4.0 vector is AV:L/AC:L/AT:N/PR:N/UI:P with VA:H and no confidentiality or integrity impact, meaning the attack is local, requires no privileges, but depends on the victim performing an action (installing a malicious extension). The vuln.today Decision label is 'this_month', not act_now/emergency, which aligns with the local vector and interaction requirement. No CISA KEV listing and no EPSS score were provided in the input, so there is no evidence of active or probable exploitation; the GHSA advisory includes a reproduction (directory listing and stack trace) demonstrating the condition, but no weaponized, drop-in exploit code is referenced. The key tension to note: the official 4.0 vector attributes impact entirely to the vulnerable system (VA:H, SC/SI/SA:N), yet the advisory explicitly states that exhausting the host inode pool causes OTHER system services and applications to fail - a system-wide effect that arguably warrants a subsequent-system impact. Net assessment: a genuine denial-of-service condition, but one gated behind social engineering and yielding only self-inflicted availability loss on the victim's workstation, so it should be patched on a routine cycle, not treated as a drop-everything issue.

An attacker packages a Ghidra extension ZIP containing an extremely large number of small files and distributes it (e.g., on a forum, plugin repository, or via a targeted message) as a useful plugin. A reverse engineer downloads it and uses Ghidra's extension installer, which extracts every entry without limit into ~/.config/ghidra/.../Extensions, exhausting the filesystem's inodes or disk space. No public weaponized exploit code is referenced, though the GHSA advisory includes a working reproduction; exploitation is local (AV:L) and low-complexity but requires the user to install the archive (UI:P).