CVE-2026-18718

Name of the Vulnerable Software and Affected Versions Ghidra (affected versions not specified)

Description An arbitrary code execution issue exists in the Swift demangler analyzer. An attacker can execute arbitrary binaries by providing a malicious project containing a crafted Swift tool directory path. When the project is opened, the SwiftDemanglerAnalyzer restores the persisted Swift binary directory from the project state, and the SwiftNativeDemangler executes the resolved binary without performing integrity or signature verification. This allows attacker-controlled executables to run under the privileges of the Ghidra process user without any prompt or confirmation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.