CVE-2026-102734 Details
Description
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9.
A vulnerability in the Python expression evaluator asteval, prior to version 1.0.9, allows for arbitrary memory read and write operations, effectively escaping the intended sandbox restrictions. This issue arises when asteval is used with Numpy enabled, which is the default configuration. The vulnerability is rooted in how the interpreter handles attribute access and assignment, particularly with Numpy arrays. Exploitation of this vulnerability could lead to unauthorized access to sensitive data, corruption of memory, execution of arbitrary code, or crashing of the host process.
Users can mitigate this vulnerability by updating to asteval version 1.0.9 or later, where the issue has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4 | [email protected] | Source CodeVendor |
| https://github.com/lmfit/asteval/pull/153 | [email protected] | Source CodeVendor |
| https://github.com/lmfit/asteval/releases/tag/1.0.9 | [email protected] | Release NotesVendor |
| https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
| CWE-749 | Exposed Dangerous Method or Function | [email protected] |
| CWE-913 | Improper Control of Dynamically-Managed Code Resources | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| asteval | <= 1.0.8 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | [email protected] |