CVE-2026-34172 Details

A remote code execution vulnerability has been identified in the Giskard library, specifically in the chat workflow component, prior to versions 0.3.4 and 1.0.2b1. The issue arises because the ChatWorkflow.chat() method directly passes string arguments as Jinja2 templates to a non-sandboxed environment. This allows for full remote code execution through Jinja2 class traversal, particularly if user input is sent to the chat method. The vulnerability is rooted in the fact that the input is silently interpreted as a template rather than plain text, enabling exploitation by traversing class attributes to access and execute system commands.

Users can update to Giskard versions 0.3.4 or 1.0.2b1 to address this vulnerability. The update replaces the unsandboxed Jinja2 Environment with SandboxedEnvironment, which blocks attribute access to dunder methods and prevents class traversal, mitigating the risk of remote code execution.