CVE-2026-34172 in giskard-oss
Résumé (Anglaise)
Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who passes user input to this method enables full remote code execution via Jinja2 class traversal. The method name chat and parameter name message naturally invite passing user input directly, but the string is silently parsed as a Jinja2 template, not treated as plain text. This issue has been patched in versions 0.3.4 and 1.0.2b1.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Responsable
GitHub_M
Réserver
25/03/2026
Divulgation
31/03/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354391 | Giskard-AI giskard-oss Name Message ChatWorkflow.chat élévation de privilèges | 1336 | Non défini | Correctif officiel | CVE-2026-34172 |