A vulnerability categorized as problematic has been discovered in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation leads to uncontrolled recursion.

This vulnerability is referenced as CVE-2026-2887. The attack can only be performed from a local environment. Furthermore, an exploit is available.

It is advisable to upgrade the affected component.