CVE-2026-4946 | NSA Ghidra up to 12.0.2 Binary os command injection (GHSA-mc3p-mq2p-xw6v)

A vulnerability was found in NSA Ghidra up to 12.0.2. It has been rated as critical. This vulnerability affects unknown code of the component Binary Handler. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-4946. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.