HighVulnerability

GHSA-q27q-98j4-9pfv: qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

Source: GitHub Advisory(opens in a new tab)
Identifiers: CVE-2026-55585GHSA-q27q-98j4-9pfv
Published: August 25, 2026
Record updated: October 9, 2026

Affected: qwed < 5.1.2
Fixed in: 5.1.2
released June 14, 2026, 72 days before disclosure
Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 0.8%

Summary

The qwed package (version 5.1.1) passes attacker-controlled input directly to SymPy's parse_expr() without a restricted namespace, and parse_expr() internally calls Python's eval(). Any authenticated tenant can therefore run arbitrary Python code in the API server process, reached through POST /verify/math and POST /verify/batch. Any user can obtain an account through the default-enabled /auth/signup endpoint, so the precondition is only a standard user account.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Details

Scores and exploitation

Patch available: Yes
EPSS: 0.8%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on November 4, 2026.
Disclosure date: August 25, 2026

Affected

Packages: qwed@< 5.1.2 (fixed: 5.1.2)

Classification

Attack type: Other
Attack sophistication: Trivial
AI component targeted: API
Impact: Confidentiality,
Integrity,
Availability
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://github.com/advisories/GHSA-q27q-98j4-9pfv

First tracked: August 25, 2026 at 02:01 PM ET, from GitHub Advisory Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 80% (self-assessed)

Summary

Mitigation

Related items