PatchTheCVEghidra vulnerabilities and fixes
Recent CVEs affecting ghidra, with upgrade or downgrade steps. 2 tracked.
ghidra has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-06-10. Highest priority: CVE-2026-52758 (score 37/100).
- CVE-2026-52758 HIGH 8.8 UPGRADE Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied
- CVE-2026-49497 LOW 3.3 UPGRADE Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate
FAQ
How do I fix ghidra vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ghidra being exploited right now?
None of the tracked ghidra CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ghidra CVE should I patch first?
CVE-2026-52758 currently ranks highest (37/100): Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied .