CVE-2026-52349

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-20 · updated 2026-07-23
Weakness: CWE-22

Description

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.

References

https://github.com/itsjustcurtis/MenyooSP/commit/729aa48
https://github.com/itsjustcurtis/MenyooSP/pull/550

Get alerted when CVE-2026-52349 or the next vulnerability affects your stack