CVE-2026-52349

Description

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.

References

• https://github.com/itsjustcurtis/MenyooSP/commit/729aa48
• https://github.com/itsjustcurtis/MenyooSP/pull/550