CVE-2026-52755 is a path traversal vulnerability affecting Ghidra versions before 12.0.4. The issue exists in the theme import feature, where insufficient validation of pathname inputs allows crafted ZIP files to escape the restricted theme directory. This can result in unauthorized file writes to arbitrary locations, potentially enabling attackers to execute arbitrary code or alter sensitive user files. The vulnerability is rated high severity with a CVSS 4.0 score of 8.4. No vendor advisory or patch information is available at this time.

Successful exploitation allows attackers to write files outside the intended theme directory, which can lead to arbitrary code execution or modification of sensitive files such as .bashrc or .ssh/authorized_keys. This can compromise system integrity and user security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid importing untrusted theme ZIP files. Monitor vendor communications for updates on patches or mitigations.