CVE-2026-52751: Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection

Synopsis

Remote code execution via unsafe deserialization affects Ghidra before version 12.1. The vulnerability is reachable over the network and requires no authentication, but does require a victim to open a maliciously crafted project file containing a ghidra:// URL. Successful exploitation allows an attacker to execute arbitrary commands on the victim's machine by abusing a Jython 2.7.4 gadget chain in the Shared Project RMI connection code. A patched-image rebuild at version 12.1 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must deliver a malicious project file or ghidra:// URL to a victim reachable over the network; the vulnerable RMI deserialization code is triggered client-side upon connection.

• AuthenticationNot required

  No authentication is needed; the vulnerability is exploitable by any unauthenticated party who can get the victim to open a crafted project file.

• Victim interactionRequired

  The victim must actively open a malicious Ghidra project file or ghidra:// URL via File then Open Project, making this a social-engineering-dependent attack.

• Attack complexityDetail

  Attack complexity is low; the exploit relies on a well-known Jython 2.7.4 deserialization gadget chain and requires no special race conditions or environmental prerequisites.

Blast Radius

• Reads files and environment data accessible to the user running Ghidra, including source code, reverse-engineering artifacts, and credentials stored on the host.
• Writes or modifies files on the victim's machine under the permissions of the Ghidra process.
• Executes arbitrary operating system commands on the victim's host, enabling installation of backdoors or lateral movement tools.
• Crashes or destabilizes the Ghidra process and any dependent tooling on the affected workstation.