PT-2026-32984 · Unknown · Giskard-Checks

Published 2026-04-14 · Updated 2026-04-19 · CVE-2026-40320

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions giskard-checks versions prior to 1.0.2b1

Description The ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, which silently interpreted template expressions at runtime. If check definitions are loaded from an untrusted source, such as a shared project file or externally contributed configuration, a crafted rule string could lead to arbitrary code execution. Exploitation requires write access to a check definition and the subsequent execution of the test suite. This behavior occurs in the conformity.py file where the rule parameter is processed.

Recommendations Update to version 1.0.2b1 or later.

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-40320

GHSA-7XJM-G8F4-RP26

Affected Products

Giskard-Checks

References · 7

• https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-7xjm-g8f4-rp26 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40320 · Security Note
• https://osv.dev/vulnerability/GHSA-7xjm-g8f4-rp26 · Vendor Advisory
• https://github.com/Giskard-AI/giskard-oss/releases/tag/giskard-checks%2Fv1.0.2b1 · Note
• https://github.com/Giskard-AI/giskard-oss · Note
• https://twitter.com/CVEnew/status/2045889724787662938 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045224747521163303 · Twitter Post