CVE-2025-57809

HIGH EPSS 34.9%
Published Aug 25, 202510mo ago · Modified Jun 17, 20262w ago
7.7 CVSS 4.0
High
Find Similar
Published Aug 25, 2025 10mo ago
Last Modified Jun 17, 2026 2w ago

Description

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.

CVSS Details

Base Score
7.7
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
34.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-674

Affected Products 1

VendorProductVersionRange
mlc-aixgrammar* <0.1.21

References 3

  • github.com https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5
    Patch
  • github.com https://github.com/mlc-ai/xgrammar/issues/250
    ExploitIssue Tracking
  • github.com https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-5cmr-4px5-23pc
    Vendor Advisory

Remediation

  • github.com https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5
    Patch