PT-2026-32984 · Unknown · Giskard-Checks

CVE-2026-40320 · Published 2026-04-14 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions giskard-checks versions prior to 1.0.2b1

Description The ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, which silently interpreted template expressions at runtime. If check definitions are loaded from an untrusted source, such as a shared project file or externally contributed configuration, a crafted rule string could lead to arbitrary code execution. Exploitation requires write access to a check definition and the subsequent execution of the test suite. This behavior occurs in the conformity.py file where the rule parameter is processed.

Recommendations Update to version 1.0.2b1 or later.

Exploit

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-40320

GHSA-7XJM-G8F4-RP26

PYSEC-2026-2488

Affected Products

Giskard-Checks

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40320.json · Exploit
• https://github.com/Giskard-AI/giskard-oss/security/advisories/GHSA-7xjm-g8f4-rp26 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-40320 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40320 · Security Note
• https://osv.dev/vulnerability/GHSA-7xjm-g8f4-rp26 · Vendor Advisory
• https://github.com/Giskard-AI/giskard-oss · Note
• https://github.com/Giskard-AI/giskard-oss/releases/tag/giskard-checks%2Fv1.0.2b1 · Note
• https://twitter.com/CVEnew/status/2045889724787662938 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045224747521163303 · Twitter Post
• https://github.com/advisories/GHSA-7xjm-g8f4-rp26 · Note
• https://pypi.org/project/giskard-checks · Note