PT-2026-22503 · Unknown · Chaiscript

Oneafter · CVE-2026-3384 · Published 2026-03-01 · Updated 2026-03-05

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ChaiScript versions up to 6.1.0

Description A security issue exists in ChaiScript related to uncontrolled recursion. The chaiscript::eval::AST Node Impl::eval function, located in the include/chaiscript/language/chaiscript eval.hpp file, is affected. The issue can be exploited locally. The exploit has been publicly disclosed.

Recommendations Versions prior to 6.1.0 should be updated.

Exploit

Fix

Uncontrolled Recursion

Improper Resource Release

Weakness Enumeration

CWE-674

CWE-404

Related Identifiers

CVE-2026-3384

Affected Products

Chaiscript

References · 15

• 🔥 https://github.com/ChaiScript/ChaiScript/issues/633#issue-3828176056 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3384.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-3384 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3384 · Security Note
• https://github.com/ChaiScript/ChaiScript/issues/633 · Note
• https://vuldb.com/?submit.761303 · Note
• https://twitter.com/CVEnew/status/2028023854531285469 · Twitter Post
• https://github.com/ChaiScript/ChaiScript · Note
• https://vuldb.com/?id.348270 · Note
• https://t.me/cveNotify/154425 · Telegram Post
• https://t.me/CVEtracker/46058 · Telegram Post
• https://twitter.com/infoflowcloud/status/2028025052625588675 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2028030507389247571 · Twitter Post
• https://t.me/cveNotify/153663 · Telegram Post
• https://vuldb.com/?ctiid.348270 · Note