CVE-2026-6940
Last modified
CVE-2026-6940 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project storage boundary to cause recursive deletion of attacker-chosen directories with permissions of the radare2 process, resulting in integrity and availability loss.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project storage boundary to cause recursive deletion of attacker-chosen directories with permissions of the radare2 process, resulting in integrity and availability loss.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Radare | Radare2 | < 6.1.4 |
References
- https://github.com/radareorg/radare2/pull/25830Exploit, Issue Tracking, Third Party Advisory
- https://github.com/radareorg/radare2/pull/25830/commitsIssue Tracking, Patch
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-6940?
How severe is CVE-2026-6940?
How do I fix CVE-2026-6940?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-69320Improper neutralization of special elements used in an os co…8.8
- CVE-2026-6933The Premmerce Dev Tools plugin for WordPress is vulnerable t…8.8
- CVE-2026-6936IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-ser…6.5
- CVE-2026-6937The Appointment Booking Calendar — Simply Schedule Appointme…5.3
- CVE-2026-6938IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization…7.5
- CVE-2026-6939The CorvusPay WooCommerce Payment Gateway plugin for WordPre…7.2
- CVE-2026-6941radare2 prior to 6.1.4 contains a path traversal vulnerabili…7.8
- CVE-2026-6942radare2-mcp version 1.6.0 and earlier contains an os command…8.8
- CVE-2026-6947DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-F…8.7
- CVE-2026-6948Velociraptor versions prior to 0.76.4 contain a resource exh…4.9
- CVE-2026-6951Versions of the package simple-git before 3.36.0 are vulnera…9.8
- CVE-2026-6952A post-authentication command injection vulnerability in the…7.2
Are you affected by CVE-2026-6940?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST