CVE-2026-34172

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-34172

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34172.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-34172

Aliases

GHSA-frv4-x25r-588m

Published

2026-03-31T13:50:17.240Z

Modified

2026-04-02T13:29:20.426834Z

Severity

7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment

Details

Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chat(message) passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who passes user input to this method enables full remote code execution via Jinja2 class traversal. The method name chat and parameter name message naturally invite passing user input directly, but the string is silently parsed as a Jinja2 template, not treated as plain text. This issue has been patched in versions 0.3.4 and 1.0.2b1.

Database specific

{
    "cwe_ids": [
        "CWE-1336"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34172.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/giskard-ai/giskard-oss

Affected ranges

Type

GIT

Repo

https://github.com/giskard-ai/giskard-oss

Events

Introduced

ec216e1d186155d3911fc853850f7518497aa652

Fixed

5e33c55d8349ef1f1e2a7b2b5e48217eb0a62d82

Database specific

{
    "versions": [
        {
            "introduced": "1.0.1a1"
        },
        {
            "fixed": "1.0.2b1"
        }
    ]
}

Affected versions

giskard-checks/v1.*

giskard-checks/v1.0.1b1

giskard-core/v1.*

giskard-core/v1.0.1b1

giskard-core/v1.0.1b2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34172.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "0.3.4"
            }
        ]
    }
]