CVE-2026-3389

Name of the Vulnerable Software and Affected Versions Squirrel versions up to 3.2

Description A flaw exists in Squirrel that can lead to a null pointer dereference. This issue is related to the sqstd rex newnode function within the sqstdlib/sqstdrex.cpp library. The issue can be triggered locally. The exploit has been publicly disclosed.

Recommendations Versions prior to 3.2 should be updated. As a temporary workaround, consider restricting the use of the sqstd rex newnode function until a patch is available.