# CVE-2026-52751: NSA Ghidra unsafe deserialization in Shared-Project RMI connection

Source: https://junglewise.ai/threats/cve-2026-52751-nsa-ghidra-unsafe-deserialization-in-shared-project-rmi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-10. Updated: 2026-06-10  
License: CC BY 4.0 with a link back

CVE-2026-52751 · Severity: high · CVSS 8.8 · Published 2026-06-10

Ghidra is a popular software reverse-engineering suite used by security researchers. A vulnerability in how it handles shared projects allows an attacker to take complete control of a user's computer if the user opens a specially crafted project file. This could lead to the theft of sensitive research data, installation of malware, or unauthorized access to the user's corporate network.

## Quick answers

**Is CVE-2026-52751 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-52751 being exploited in the wild.

**How severe is CVE-2026-52751?** High severity, with a CVSS score of 8.8, published 10 June 2026.

**Which products and versions are affected?** NSA Ghidra 9.1 to 12.0.x.

**Is there a fix for CVE-2026-52751?** A patch was published on 2026-06-10: Fix confirmed in version 12.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-52751 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-52751?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Ghidra versions 9.1 through 12.0.x are vulnerable to unsafe deserialization via the client-side Shared-Project RMI connection code. The vulnerability exists because the client fails to implement an ObjectInputFilter when performing RMI calls (such as reg.list()) against a remote server. An attacker can craft a malicious project file containing a 'ghidra://' URL; when a victim opens this project, the client automatically connects to the attacker-controlled server. The attacker's server can then return a serialized object that leverages a Jython 2.7.4 gadget chain (specifically involving org.python.core.PyMethod) to execute arbitrary system commands. This occurs before any authentication or credential exchange takes place. The issue is resolved in Ghidra 12.1 by implementing restrictive deserialization filters.

## Affected products

- NSA Ghidra 9.1 to 12.0.x

## Timeline

- 2026-05-14: advisory: Initial GitHub Security Advisory published
- 2026-06-10: disclosed: NVD publication and VulnCheck advisory release
- 2026-06-10: patched: Fix confirmed in version 12.1

## References

- [https://github.com/NationalSecurityAgency/ghidra/commit/91a269103fe5d133c14ec3afa60280dccb94be5c](https://github.com/NationalSecurityAgency/ghidra/commit/91a269103fe5d133c14ec3afa60280dccb94be5c)
- [https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-fgg5-g275-7742](https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-fgg5-g275-7742)
- [https://www.vulncheck.com/advisories/ghidra-remote-code-execution-via-unfiltered-rmi-deserialization-in-shared-project-connection](https://www.vulncheck.com/advisories/ghidra-remote-code-execution-via-unfiltered-rmi-deserialization-in-shared-project-connection)