CVE-2026-40320

OVERVIEW CVE-2026-40320 is a template injection vulnerability in the Giskard AI model testing framework, specifically affecting the ConformityCheck class in versions prior to 1.0.2b1. The vulnerability exists because the framework passes user-supplied rule parameters directly to Jinja2's Template() constructor without proper sanitization, allowing unintended template expression evaluation at runtime. This affects organizations using Giskard for AI model validation and testing. SEVERITY The attack requires local write access to check definition files and subsequent execution of the test suite, making it a moderately constrained threat vector. While the CVSS score is not formally assigned, the FAUCET Risk Score of 32.0/100 and exceptionally low EPSS score of 0.00026 suggest limited real-world exploitability. However, successful exploitation could result in arbitrary code execution with the privileges of the user running the test suite, representing significant potential impact for affected systems. EXPLOITATION STATUS There is currently no evidence of active exploitation in the wild. The vulnerability is not listed on the Known Exploited Vulnerabilities catalog, and community attention remains minimal as indicated by the inactive status on threat intelligence platforms. The vulnerability was remediated in giskard-checks version 1.0.2b1, and organizations should prioritize updating to this patched version if they rely on this testing framework.