A vulnerability has been found in aardappel lobster up to 2025.4 and classified as problematic. Affected by this issue is the function
lobster::Parser::ParseStatements in the library dev/src/lobster/parser.h of the component Parsing. The manipulation leads to memory corruption.
This vulnerability is referenced as CVE-2026-2259. The attack can only be performed from a local environment. Furthermore, an exploit is available.
Applying a patch is the recommended action to fix this issue.
