CVE-2026-52758 is a SQL injection vulnerability affecting Ghidra versions prior to 12.1. The issue exists in the BSim filter types, where user input is directly concatenated into SQL commands without sanitization or parameterization. This allows remote attackers to inject arbitrary SQL commands through the BSim network query protocol, potentially leading to unauthorized data access or modification in the underlying PostgreSQL database. The vulnerability requires low attack complexity and no user interaction but does require low privileges. There is no vendor advisory or patch available at this time.

Successful exploitation allows remote attackers with low privileges to execute arbitrary SQL commands on the PostgreSQL database used by Ghidra. This can result in unauthorized reading, modification, or deletion of sensitive data stored within the database. The vulnerability compromises data confidentiality, integrity, and availability within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the BSim network query protocol interface to trusted users only and monitor for unusual database activity related to Ghidra. Avoid exposing the vulnerable service to untrusted networks.