RCE in Dendibakh Perf-Ninja

CVE-2026-4745

Improper Control of Generation of Code ('Code Injection') vulnerability in dendibakh perf-ninja (labs/misc/pgo/lua modules). This vulnerability is associated with program files ldo.C. This issue affects perf-ninja.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.003 (20.9th percentile) — read the EPSS interpretation.

Affected products

Dendibakh Perf-ninja — versions 0

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve_disclosure@tech.gov.sg (patch)