Home / Vulnerability Intelligence / CVE-2024-53326

CVE-2024-53326 - Vulnerability Analysis

HighCVSS: 7.3

Last Updated: May 8, 2026

LINQPad - Insecure Deserialization

Published: May 8, 2026Updated: May 8, 2026PoC Available

Overview

LINQPad before 5.52.01 Pro edition contains an insecure deserialization vulnerability in LINQPad.AutoRefManager::PopulateFromCache(), letting attackers execute arbitrary code remotely, exploit requires crafted input.

Severity & Score

Severity: High

CVSS Score: 7.3

Impact

Attackers can execute arbitrary code remotely, potentially leading to full system compromise.

Mitigation

Upgrade to version 5.52.01 or later.

References

https://trustedsec.com/blog/discovering-a-deserialization-vulnerability-in-linqpad
https://www.linqpad.net/

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2024-53326
Severity: High
CVSS Score: 7.3
Type: insecure_deserialization
Status: unconfirmed

CWE

CWE-502

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H