CVE-2026-112077

A flaw was found in radare2. When the embedded HTTP server is running, the sandbox mechanism fails to restrict process execution due to overly permissive default policy settings. A remote attacker with network access to an exposed HTTP command service can exploit this issue by sending commands th...