CVE-2025-24359

ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.

• CWE-134
• CWE-749

• https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507
• https://github.com/lmfit/asteval/security/advisories/GHSA-3wwr-3g9f-9gc7
• https://lucumr.pocoo.org/2016/12/29/careful-with-str-format

Published

Jan 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24353Directus is a real-time API and App dashboard for managing S…4.3
• CVE-2025-24354imgproxy is server for resizing, processing, and converting …5.3
• CVE-2025-24355Updatecli is a tool used to apply file update strategies. Pr…7.1
• CVE-2025-24356fastd is a VPN daemon which tunnels IP packets and Ethernet …7.5
• CVE-2025-24357vLLM is a library for LLM inference and serving. vllm/model_…8.8
• CVE-2025-24358gorilla/csrf provides Cross Site Request Forgery (CSRF) prev…5.4
• CVE-2025-24360Nuxt is an open-source web development framework for Vue.js.…5.3
• CVE-2025-24361Nuxt is an open-source web development framework for Vue.js.…5.3
• CVE-2025-24362In some circumstances, debug artifacts uploaded by the CodeQ…7.1
• CVE-2025-24363The HL7 FHIR IG publisher is a tool to take a set of inputs …4.2
• CVE-2025-24364vaultwarden is an unofficial Bitwarden compatible server wri…7.2
• CVE-2025-24365vaultwarden is an unofficial Bitwarden compatible server wri…7.5