8.7
High
CVE-2026-25048 xgrammar is an open-source library for efficient, flexible, and portable structured generation
Description
xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault (core dumped). This issue has been patched in version 0.1.32.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat AI Inference Server 3.2 1775252598 | earliest → < 1775252598 | 1775252598 |
| Red Hat OpenShift AI 2.25 1783998857 | earliest → < 1783998857 | 1783998857 |
| Red Hat AI Inference Server | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| xgrammar 0.1 | earliest → < 0.1.32 | 0.1.32 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat AI Inference Server 3.2
The 63 CVEs of Red Hat AI Inference Server 3.2 →
CVE-2026-15588
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
5.3
Medium
CVE-2026-16118
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
7.1
High
CVE-2026-58015
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
5.9
Medium
CVE-2026-58014
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
7.3
High