CVE-2026-6940 | radareorg radare2 up to 6.1.3 path traversal

VDB-359225 · CVE-2026-6940 · GCVE-0-2026-6940 RADAREORG RADARE2 UP TO 6.1.3 PATH TRAVERSAL HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 6.1 $0-$5k 3.28+ Summaryinfo A vulnerability classified as critical has been found in radareorg radare2 up to 6.1.3. This impacts an unknown function. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-6940. The attack can only be performed from a local environment. No exploit is available. It is recommended to upgrade the affected component. Detailsinfo A vulnerability was found in radareorg radare2 up to 6.1.3. It has been rated as critical. This issue affects some unknown processing. The manipulation with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is confidentiality, integrity, and availability. The summary by CVE is: radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project storage boundary to cause recursive deletion of attacker-chosen directories with permissions of the radare2 process, resulting in integrity and availability loss. The weakness was published by Chia Min Jun Lennon. The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-6940 since 04/23/2026. The exploitation is known to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1006 for this issue. Upgrading to version 6.1.4 eliminates this vulnerability. Applying the patch e5fcf56fe038760c872c6dbed432602778fde1ed is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version. Productinfo Type Programming Tool Software Vendor radareorg Name radare2 Version 6.1.0 6.1.1 6.1.2 6.1.3 License open-source Website Product: https://github.com/radareorg/radare2/ CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 6.2 VulDB Meta Temp Score: 6.1 VulDB Base Score: 5.3 VulDB Temp Score: 5.1 VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA Base Score: 7.1 CNA Vector (VulnCheck): 🔒 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Path traversal CWE: CWE-22 CAPEC: 🔒 ATT&CK: 🔒 Physical: Partially Local: Yes Remote: Partially Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: radare2 6.1.4 Patch: e5fcf56fe038760c872c6dbed432602778fde1ed Timelineinfo 04/23/2026 Advisory disclosed 04/23/2026 +0 days CVE reserved 04/23/2026 +0 days VulDB entry created 04/23/2026 +0 days VulDB entry last update Sourcesinfo Product: github.com Advisory: github.com Researcher: Chia Min Jun Lennon Status: Confirmed CVE: CVE-2026-6940 (🔒) GCVE (CVE): GCVE-0-2026-6940 GCVE (VulDB): GCVE-100-359225 Entryinfo Created: 04/23/2026 23:24 Changes: 04/23/2026 23:24 (78) Complete: 🔍 Cache ID: 99:87E:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸