CVE-2026-30960

CVE-2026-30960 identifies a critical arbitrary code execution vulnerability within the 'rssn' Rust scientific computing library. This flaw resides in the JIT compilation engine, where improper input validation and external control of code generation via the CFFI allow attackers to supply malicious parameters. Rated 9.4 CRITICAL (CVSSv4), exploitation requires local access but no privileges or user interaction, enabling arbitrary code execution at the host process's privilege level, which is particularly concerning for high-performance computing contexts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and its EPSS score indicates a very low probability of exploitation in the wild.