Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-102734— asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Quick assessment

Affected
lmfit asteval
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

asteval 是一个专为受限执行环境设计的 Python 表达式求值器。在 1.0.9 版本之前，asteval/astutils.py 中启用了 numpy 的默认解释器暴露了 ctypes 类型，并允许通过 from_address 进行内存访问。虽然 safe_getattr 阻止了对 ctypes 模块的直接访问，但未能阻止可访问的 ctypes 类型对象；同时，属性赋值操作使用了未过滤的 setattr 而非 safe_setattr。攻击者可以通过可控表达式利用 id 获取地址，通过 from_add

CVSS 5.5 · Medium

Possible ATT&CK Techniques 2 AI

T1014 · Rootkit T1055 · Process Injection

Affected Version Matrix 1

VendorProduct Version RangeStatus
lmfit asteval < 1.0.9 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-102734

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Source: CVE Program / CVE List V5
Vulnerability Description
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
lmfit asteval < 1.0.9 -

II. Public POCs for CVE-2026-102734

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-102734

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-102734 (2)

Vendor Advisories for CVE-2026-102734 (1)

Vendor Pages for CVE-2026-102734 (1)

IV. Related Vulnerabilities

Same product: asteval
Same vendor: lmfit
Same weakness: CWE-693

V. Comments for CVE-2026-102734

No comments yet

Leave a comment