CVE-2026-40320 Details

A vulnerability exists in the Giskard AI testing framework for AI models, specifically in the Giskard-Checks component, versions prior to 1.0.2b1. The issue arises in the ConformityCheck class, where the rule parameter is rendered using Jinja2's Template constructor. This implementation allows template expressions to be evaluated at runtime, creating a risk of arbitrary code execution if check definitions are sourced from untrusted origins. Exploitation requires write access to a check definition and the execution of the test suite.

Users are advised to upgrade to Giskard-Checks version 1.0.2b1 or later, where this vulnerability has been addressed by removing template rendering from rule evaluation.