CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4
https://github.com/lmfit/asteval/pull/153
https://github.com/lmfit/asteval/releases/tag/1.0.9
https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx

Configurations

No configuration.

History

13 Oct 2026, 16:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-13 16:17

Updated : 2026-10-16 20:04

NVD link : CVE-2026-102734

Mitre link : CVE-2026-102734

CVE.ORG link : CVE-2026-102734

JSON object : View

Products Affected

No product.

CWE

CWE-693

Protection Mechanism Failure

CWE-749

Exposed Dangerous Method or Function

CWE-913

Improper Control of Dynamically-Managed Code Resources

{"id": "CVE-2026-102734", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-102734", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-13T20:13:07.578455Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "lmfit", "product": "asteval", "versions": [{"status": "affected", "version": "< 1.0.9"}]}]}], "published": "2026-10-13T16:17:09.820", "references": [{"url": "https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4", "source": "security-advisories@github.com"}, {"url": "https://github.com/lmfit/asteval/pull/153", "source": "security-advisories@github.com"}, {"url": "https://github.com/lmfit/asteval/releases/tag/1.0.9", "source": "security-advisories@github.com"}, {"url": "https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-693"}, {"lang": "en", "value": "CWE-749"}, {"lang": "en", "value": "CWE-913"}]}], "descriptions": [{"lang": "en", "value": "asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9."}], "lastModified": "2026-10-16T20:04:29.760", "sourceIdentifier": "security-advisories@github.com"}