Unrated severityNVD Advisory· Published Jul 20, 2026· Updated Jul 21, 2026

CVE-2026-52349

Description

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.

Affected products

Itsjustcurtis/MenyooSPllm-create
Range: <729aa48

Patches

Vulnerability mechanics

References

github.com/itsjustcurtis/MenyooSP/commit/729aa48mitre
github.com/itsjustcurtis/MenyooSP/pull/550mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000