Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silently interpreting template expressions at runtime. If check definitions are loaded from an untrusted source, a crafted rule string could achieve arbitrary code execution. Exploitation requires write access to a check definition and subsequent execution of the test suite. This issue has been fixed in giskard-checks version 1.0.2b1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40320 Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's defaul… https://www.cve.org/CVERecord?id=CVE-2026-40320
Post summary
A new CVE (2026‑40320) has been announced for Giskard versions below 1.0.2b1, where the ConformityCheck class improperly renders a rule parameter via Jinja2, presenting a potential vulnerability.
CVE-2026-40320 Arbitrary Code Execution in Giskard AI Testing Framework via Jinja2 Template Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40320
Post summary
The content announces CVE‑2026‑40320 as an A/C execution vulnerability in Giskard AI Testing Framework through Jinja2 template injection, but provides no proof of concept, exploit code, active exploitation, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | giskard | giskard | - | - | - |