CVE-2026-41015

{
  "id": "CVE-2026-41015",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-16T03:16:27.440",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3."
    },
    {
      "lang": "es",
      "value": "radare2 antes de 9236f44, cuando se configura en UNIX sin SSL, permite la inyección de comandos a través de un nombre PDB a rabin2 -PP. NOTA: aunque se supone que los usuarios deben usar la última versión de git (no una versión publicada), el rango de fechas para el código vulnerable fue de menos de una semana, ocurriendo después de 6.1.2 pero antes de 6.1.3."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "radare",
          "product": "radare2",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "01ca2f61fa43bd3f4b732447de31b16039d820c0",
              "lessThan": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2",
              "versionType": "git",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.4,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-16T13:15:20.609734Z",
          "id": "CVE-2026-41015",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/radareorg/radare2/blob/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2/SECURITY.md?plain=1#L3-L5",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/radareorg/radare2/commit/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/radareorg/radare2/issues/25650",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/radareorg/radare2/pull/25651",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/radareorg/radare2/issues/25650",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}