CVE-2026-32640: CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes in danthedeckie simpleeval
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. The latest version 1.0.5 has this issue fixed. This vulnerability is fixed in 1.0.5.
AI Analysis
Technical Summary
The simpleeval library allows evaluatable expressions in Python projects. Versions before 1.0.5 improperly control access to object attributes, including modules, which can leak dangerous modules or functions into the sandbox. This flaw arises when objects passed as names to SimpleEval contain modules or unsafe attributes accessible as callbacks or directly. The vulnerability is addressed in version 1.0.5 by restricting such attribute exposure.
Potential Impact
Exploitation of this vulnerability could allow an attacker to access dangerous modules or functions within the sandboxed evaluation environment, potentially leading to unauthorized code execution or other security breaches. The CVSS 4.0 base score is 8.7, indicating a high impact with network attack vector, no privileges or user interaction required, but high impact on integrity.
Mitigation Recommendations
Upgrade to simpleeval version 1.0.5 or later, where this vulnerability is fixed. No other mitigation is required as the issue is resolved in the official fix.
CVE-2026-32640: CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes in danthedeckie simpleeval
Description
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. The latest version 1.0.5 has this issue fixed. This vulnerability is fixed in 1.0.5.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The simpleeval library allows evaluatable expressions in Python projects. Versions before 1.0.5 improperly control access to object attributes, including modules, which can leak dangerous modules or functions into the sandbox. This flaw arises when objects passed as names to SimpleEval contain modules or unsafe attributes accessible as callbacks or directly. The vulnerability is addressed in version 1.0.5 by restricting such attribute exposure.
Potential Impact
Exploitation of this vulnerability could allow an attacker to access dangerous modules or functions within the sandboxed evaluation environment, potentially leading to unauthorized code execution or other security breaches. The CVSS 4.0 base score is 8.7, indicating a high impact with network attack vector, no privileges or user interaction required, but high impact on integrity.
Mitigation Recommendations
Upgrade to simpleeval version 1.0.5 or later, where this vulnerability is fixed. No other mitigation is required as the issue is resolved in the official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-03-12T15:29:36.560Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69b481d42f860ef943b5ebbd
Added to database: 3/13/2026, 9:29:56 PM
Last enriched: 4/22/2026, 6:07:49 AM
Last updated: 4/28/2026, 5:42:35 AM
Views: 143
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.