The vulnerability in asteval stems from insufficient protection of the Procedure class's 'body' attribute, which holds AST nodes. The on_attribute handler attempts to block unsafe attribute access by checking if attributes are in UNSAFE_ATTRS or are dunder methods. However, an attacker can exploit a TOCTOU race condition by hooking the 'startswith' method on an AST node's attribute string to replace it with '__getattribute__' after the safety check but before the attribute is accessed. This allows bypassing the safety check and obtaining references to sensitive Python internals, enabling arbitrary code execution. A proof-of-concept demonstrates executing the 'whoami' command via this method.

Successful exploitation allows an attacker to escape the asteval sandbox and execute arbitrary Python code with the privileges of the hosting application. This can lead to full compromise of the host system, including executing system commands, accessing sensitive data, and manipulating application behavior. The CVSS score of 8.4 reflects high confidentiality, integrity, and availability impacts with low attack complexity and no user interaction required.

A patch is available for this vulnerability. Users should upgrade to a fixed version of the asteval library as incorporated in Checkov versions 3.2.490 and later. Until patched, avoid processing untrusted input with asteval or restrict usage contexts to trusted environments. Review vendor advisories for the official fix and apply updates promptly.