CVE-2026-108387 | radareorg radare2 up to 6.2.1 Binary Format Plugins execvp bclass os command injection

November 5, 2026 Yanac

A vulnerability was found in radareorg radare2 up to 6.2.1 and classified as problematic. Affected by this vulnerability is the function execvp of the component Binary Format Plugins. Such manipulation of the argument bclass leads to os command injection.

This vulnerability is listed as CVE-2026-108387. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More