| Titre | AntaresMugisho PyBlade v0.1.8-alpha through v0.2.0-alph Code Injection |
|---|
| Description | This code is vulnerable to CWE-94: Code Injection and CWE-1336: Template Engine Injection due to unsafe expression evaluation in template rendering.
The vulnerability affects v0.1.8-alpha through v0.2.0-alpha through two different mechanisms:
v0.1.8-alpha and v.0.1.9-alpha: The _is_safe_ast() function in sandbox.py contains a logic flaw. The attribute whitelist check only validates ast.Name nodes (e.g., str.method) but bypasses ast.Constant nodes (e.g., ''.__class__), allowing access to dangerous Python magic methods.
v0.2.0-alpha: The evaluator.py file uses eval() directly without any AST validation, providing no security checks at all.
This allows an attacker to achieve Remote Code Execution (RCE) through Python's object model by accessing __class__, __mro__, and __subclasses__ chains. |
|---|
| La source | ⚠️ https://github.com/AntaresMugisho/PyBlade/issues/1 |
|---|
| Utilisateur | zhangxinyu06 (UID 96407) |
|---|
| Soumission | 19/03/2026 10:42 (il y a 7 mois) |
|---|
| Modérer | 04/04/2026 15:54 (16 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 355329 [AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha AST Validation sandbox.py _is_safe_ast élévation de privilèges] |
|---|
| Points | 20 |
|---|