PT-2026-61602

Name of the Vulnerable Software and Affected Versions Menyoo 2.0 versions prior to commit 729aa48 Description A directory traversal issue allows a local attacker to execute arbitrary code. This occurs through the Spooner file management, the save, folder, and rename functions of the VehicleSpawne...

CVE-2026-52349

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality,...

CVE-2026-52349

CVE-2026-52349 : Directory traversal vulnerability in Menyoo 2.0 (pre-commit 729aa48). A local attacker could exploit Spooner file management, VehicleSpawner, WeaponOptions, and PedComponentChanger operations to achieve arbitrary code execution. Root cause is path handling in save/folder/rename/c...