CVE-2026-4946 NSA Ghidra Auto-Analysis Annotation Command Execution

Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when an analyst interacts with the UI. Specifically, the @execute annotation which is intended for trusted, user-authored comments is...

GHSA-MC3P-MQ2P-XW6V

creationtimestamp| type| source ---|---|--- 2026-03-25 16:55:00+00:00| seen| http://takeonme.org/cves/cve-2026-4946/...

CVE-2026-4946

creationtimestamp| type| source ---|---|--- 2026-03-25 16:55:00+00:00| seen| http://takeonme.org/cves/cve-2026-4946/ 2026-03-29 20:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7xsulyfj2t 2026-03-29 21:00:31+00:00| seen|...