A vulnerability categorized as problematic has been discovered in ChaiScript up to 6.1.0. The impacted element is the function
chaiscript::str_less::operator of the file include/chaiscript/chaiscript_defines.hpp. The manipulation results in use after free.
This vulnerability is reported as CVE-2026-2655. The attack requires a local approach. Moreover, an exploit is present.
The project was informed of the problem early through an issue report but has not responded yet.