Ghidra before version 12.1 on Windows contains a command injection flaw in the URL annotation click handler. When users open a comment that contains a malicious URL, the tool does not properly escape cmd.exe metacharacters, allowing execution of arbitrary shell commands under the privileges of the Ghidra user. This flaw gives an attacker the ability to run any command, creating a command execution risk on the machine running Ghidra.

The vulnerability affects Ghidra versions prior to 12.1 released the National Security Agency, specifically the Windows build. Any installation of Ghidra on Windows that has not been updated to 12.1 or later is susceptible.

The CVSS score of 8.4 reflects a high severity, and the EPSS score is currently unavailable. The flaw is not listed in the CISA KEV catalog, but it remains a significant local attack vector. Exploitation requires an end‑user to open a malicious URL annotation, typically achievable by providing a crafted Ghidra project or comment. Once the user clicks the annotated link, the attacker’s commands are executed, granting full control under the Ghidra process identity.