rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT (Just-In-Time) compilation engine, which is fully exposed via the CFFI (Foreign Function Interface). Due to Improper Input Validation and External Control of Code Generation, an attacker can supply malicious parameters or instruction sequences through the CFFI layer. Since the library often operates with elevated privileges or within high-performance computing contexts, this allows for Arbitrary Code Execution (ACE) at the privilege level of the host process.
The JIT compilation engine is directly accessible through the CFFI (Foreign Function Interface) layer without proper input validation. An attacker can supply malicious parameters or instruction sequences via the CFFI interface, which are passed to the code generation mechanism without proper verification. Due to improper input validation (CWE-94, CWE-695, CWE-754) and lack of privilege restrictions (CWE-269), malicious code is executed in the context of the library process.
Attacker can execute arbitrary code (ACE) at the privilege level of the host process, which — considering that the library often operates with elevated privileges or in HPC environments — can lead to full system compromise and breach of integrity, confidentiality, and availability of resources.
Update the rssn library to version v0.2.9 or newer, available at: https://github.com/Apich-Organization/rssn/releases/tag/v0.2.9. Patch details are described in advisory GHSA-9c4h-pwmf-m6fj and RUSTSEC-2026-0038.
The rssn library for Rust — versions prior to v0.2.9 (according to vendor references)
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X