Path Traversal Vulnerability in Ghidra by National Security Agency

CVE-2026-49497

What is CVE-2026-49497?

The Ghidra software suite, developed by the National Security Agency, is impacted by a path traversal vulnerability found in the SameDirDebugInfoProvider component. This issue arises from the failure to properly validate filenames extracted from ELF binary .gnu_debuglink sections. Consequently, attackers can create specially crafted ELF binaries that include traversal sequences to explore the filesystem and potentially expose CRC32 hashes of arbitrary files during automated DWARF analysis. Such exploitation could lead to unauthorized data exposure, underscoring the importance of timely updates and security best practices.

References