CVE-2026-40517
HIGH
MEDIUM
Priority: 0.09
BB Relevance:
42/100
Published: 2026-04-22
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Active
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2's shell execution operator.
Weakness Classification (1)
References & Advisories (4)
Third Party Advisory
Issue Tracking
Exploit
Third Party Advisory
Exploit
Issue Tracking
Third Party Advisory