CyberSecBulletin

Mlc-ai vulnerabilities

We track 3 vulnerabilities in Mlc-ai products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.

3vulnerabilities
0critical
3high
0exploited
7.5average CVSS score

Latest Mlc-ai vulnerabilities

  • 7.5 High severity

    xgrammar: Uncontrolled Recursion

    CVE-2026-25048Mlc-aiEPSS 1.32%

    xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault (core dumped). This issue has been patched in version 0.1.32.

  • 7.5 High severity

    xgrammar: Allocation of Resources Without Limits or Throttling

    CVE-2025-58446Mlc-ai

    xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fi

  • 7.5 High severity

    xgrammar: Uncontrolled Recursion

    CVE-2025-57809Mlc-ai

    XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.