CVE-2026-30960

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-30960", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-07T17:34:39.981Z", "datePublished": "2026-03-10T17:11:10.797Z", "dateUpdated": "2026-03-10T17:58:17.359Z"}, "containers": {"cna": {"title": "RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface", "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-695", "lang": "en", "description": "CWE-695: Use of Low-Level Functionality", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-754", "lang": "en", "description": "CWE-754: Improper Check for Unusual or Exceptional Conditions", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "baseScore": 9.4, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "version": "4.0"}}], "references": [{"name": "https://github.com/Apich-Organization/rssn/security/advisories/GHSA-9c4h-pwmf-m6fj", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Apich-Organization/rssn/security/advisories/GHSA-9c4h-pwmf-m6fj"}, {"name": "https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9", "tags": ["x_refsource_MISC"], "url": "https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9"}, {"name": "https://rustsec.org/advisories/RUSTSEC-2026-0038.html", "tags": ["x_refsource_MISC"], "url": "https://rustsec.org/advisories/RUSTSEC-2026-0038.html"}], "affected": [{"vendor": "Apich-Organization", "product": "rssn", "versions": [{"version": "< 0.2.9", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-10T17:11:10.797Z"}, "descriptions": [{"lang": "en", "value": "rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT (Just-In-Time) compilation engine, which is fully exposed via the CFFI (Foreign Function Interface). Due to Improper Input Validation and External Control of Code Generation, an attacker can supply malicious parameters or instruction sequences through the CFFI layer. Since the library often operates with elevated privileges or within high-performance computing contexts, this allows for Arbitrary Code Execution (ACE) at the privilege level of the host process."}], "source": {"advisory": "GHSA-9c4h-pwmf-m6fj", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-10T17:58:10.744850Z", "id": "CVE-2026-30960", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T17:58:17.359Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-30960", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-10T17:58:10.744850Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T17:58:13.752Z"}}], "cna": {"title": "RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface", "source": {"advisory": "GHSA-9c4h-pwmf-m6fj", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.4, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Apich-Organization", "product": "rssn", "versions": [{"status": "affected", "version": "< 0.2.9"}]}], "references": [{"url": "https://github.com/Apich-Organization/rssn/security/advisories/GHSA-9c4h-pwmf-m6fj", "name": "https://github.com/Apich-Organization/rssn/security/advisories/GHSA-9c4h-pwmf-m6fj", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9", "name": "https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9", "tags": ["x_refsource_MISC"]}, {"url": "https://rustsec.org/advisories/RUSTSEC-2026-0038.html", "name": "https://rustsec.org/advisories/RUSTSEC-2026-0038.html", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT (Just-In-Time) compilation engine, which is fully exposed via the CFFI (Foreign Function Interface). Due to Improper Input Validation and External Control of Code Generation, an attacker can supply malicious parameters or instruction sequences through the CFFI layer. Since the library often operates with elevated privileges or within high-performance computing contexts, this allows for Arbitrary Code Execution (ACE) at the privilege level of the host process."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269: Improper Privilege Management"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-695", "description": "CWE-695: Use of Low-Level Functionality"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-754", "description": "CWE-754: Improper Check for Unusual or Exceptional Conditions"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-10T17:11:10.797Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30960", "state": "PUBLISHED", "dateUpdated": "2026-03-10T17:58:17.359Z", "dateReserved": "2026-03-07T17:34:39.981Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-10T17:11:10.797Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "rssn", "vendor": "Apich-Organization", "versions": [{"status": "affected", "version": "< 0.2.9"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT (Just-In-Time) compilation engine, which is fully exposed via the CFFI (Foreign Function Interface). Due to Improper Input Validation and External Control of Code Generation, an attacker can supply malicious parameters or instruction sequences through the CFFI layer. Since the library often operates with elevated privileges or within high-performance computing contexts, this allows for Arbitrary Code Execution (ACE) at the privilege level of the host process."}, {"lang": "es", "value": "rssn es una biblioteca de computaci\u00f3n cient\u00edfica para Rust, que combina un motor de computaci\u00f3n simb\u00f3lica de alto rendimiento con soporte para m\u00e9todos num\u00e9ricos y funcionalidades de simulaciones f\u00edsicas. La vulnerabilidad existe en el motor de compilaci\u00f3n JIT (Just-In-Time), que est\u00e1 completamente expuesto a trav\u00e9s de la CFFI (Foreign Function Interface). Debido a una validaci\u00f3n de entrada inadecuada y al control externo de la generaci\u00f3n de c\u00f3digo, un atacante puede suministrar par\u00e1metros maliciosos o secuencias de instrucciones a trav\u00e9s de la capa CFFI. Dado que la biblioteca a menudo opera con privilegios elevados o dentro de contextos de computaci\u00f3n de alto rendimiento, esto permite la ejecuci\u00f3n de c\u00f3digo arbitrario (ACE) al nivel de privilegio del proceso anfitri\u00f3n."}], "id": "CVE-2026-30960", "lastModified": "2026-06-17T10:33:13.723", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30960", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-10T17:58:10.744850Z", "version": "2.0.3"}}]}, "published": "2026-03-10T18:18:55.227", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9"}, {"source": "security-advisories@github.com", "url": "https://github.com/Apich-Organization/rssn/security/advisories/GHSA-9c4h-pwmf-m6fj"}, {"source": "security-advisories@github.com", "url": "https://rustsec.org/advisories/RUSTSEC-2026-0038.html"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-695"}, {"lang": "en", "value": "CWE-754"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,0.2.9)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "rssn", "source": "cna", "vendor": "Apich-Organization"}, "product": "rssn", "vendor": "apich-organization"}], "analysis": {"en": {"generated_at": "2026-04-16T09:42:07.121599+00:00", "value": {"mitigation_remediation": ["Upgrade rssn to the latest secure release, such as v0.2.9 or later, to obtain the vendor\u2011provided fix.", "Validate all arguments passed to the CFFI interface before invoking JIT compilation, ensuring that only well\u2011formed, non\u2011malicious instruction sequences reach the code generator.", "Limit the privileges of processes that load rssn or execute untrusted code, and consider isolating them in a sandbox or container to contain potential breaches.", "Review application code to remove or restrict CFFI calls that handle untrusted data, minimizing the attack surface."], "summary": {"action": "Apply Patch", "impact": "Arbitrary Code Execution at host process privilege level"}, "threat_synthesis": {"affected_systems": "The affected product is the rssn scientific computing library from Apich\u2011Organization. No specific product version is listed in the CNA data, but public references indicate a release tag v0.2.9 that may contain the fix. Systems that load rssn via CFFI\u2014especially those running with elevated privileges or in high\u2011performance computing environments\u2014are potentially impacted.", "description_and_impact": "The vulnerability arises from improper input validation in the JIT compilation engine exposed through the CFFI layer. An attacker employing the library\u2019s foreign function interface can provide crafted instruction sequences that trigger the JIT to generate and execute arbitrary code. This yields complete control over the host process, allowing escalation of privileges or full compromise of the system.", "risk_and_exploitability": "The CVSS base score of 9.4 classifies the issue as critical. The EPSS score is less than 1%, indicating a low current exploitation probability, and the vulnerability is not listed in the KEV catalog. Nevertheless, the attack requires only local or foreign code that can call the library, so any environment running rssn and exposing its CFFI interface is at risk if inputs are not tightly controlled."}}}}, "created": "2026-03-11T11:44:58.094549+00:00", "updated": "2026-04-16T09:45:31.677520+00:00", "vendors": ["apich-organization", "apich-organization$PRODUCT$rssn"]}