High · 7.8 CVE-2026-52349 EUVD-2026-45946GHSA-9mcw-g6wh-83hp

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute …

Published Jul 20, 2026 · Updated Jul 21, 2026 · Assigned by mitre

Description

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.

References

https://github.com/itsjustcurtis/MenyooSP/pull/550
https://github.com/itsjustcurtis/MenyooSP/commit/729aa48