Executive Summary

This vulnerability exists in the Giskard open-source testing framework for AI models, specifically in versions prior to 1.0.2b1. The issue is in the RegexMatching check, which takes a user-supplied regular expression pattern and passes it directly to Python's re.search() function without any timeout or complexity safeguards.

A maliciously crafted regex pattern can cause catastrophic backtracking, which leads to the process hanging indefinitely. To exploit this vulnerability, an attacker needs write access to a check definition and must then execute the test suite.

This vulnerability has been fixed in giskard-checks version 1.0.2b1.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is that an attacker with write access to a check definition can cause the testing process to hang indefinitely by supplying a crafted regex pattern. This can lead to denial of service conditions where the test suite becomes unresponsive.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade giskard-checks to version 1.0.2b1 or later, where the issue has been fixed.

Additionally, restrict write access to check definitions to prevent untrusted users from supplying malicious regular expressions.

Useful 0 Not Useful 0