What’s Vulnerable › Vulnerabilities

CVE-2025-58446: xgrammar vulnerable to denial of service by huge enum grammar

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-06 · updated 2026-06-17
• Weakness: CWE-770

Description

xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24.

Affected products

• mlc-ai xgrammar: 0.1.23

References

• https://github.com/mlc-ai/xgrammar/commit/ced69c3ad2f8f61b516cc278a342e7c644383e27
• https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-9q5r-wfvf-rr7f

Get alerted when CVE-2025-58446 or the next vulnerability affects your stack