(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Tampering, Code execution
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 2 fixed, 1 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-915 and CWE-94.
Summary
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. The latest version 1.0.5 has this issue fixed. This vulnerability is fixed in 1.0.5.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| danthedeckie | simpleeval | before 1.0.5 | 1.0.5 | Patch available | CNA |
| — | simpleeval (PyPI) | before 1.0.5 | 1.0.5 | Patch available | GHSA-44vg-5wv2-h2hg |
- simpleeval Vendordanthedeckie Affected before 1.0.5 Fixed in 1.0.5 Patch available CNA
- simpleeval (PyPI) Vendor— Affected before 1.0.5 Fixed in 1.0.5 Patch available GHSA-44vg-5wv2-h2hg
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:danthedeckie:simpleeval:*:*:*:*:*:python:*:* | before 1.0.5 | Vulnerable | danthedeckie |
- cpe:2.3:a:danthedeckie:simpleeval:*:*:*:*:*:python:*:* Versions before 1.0.5 Vulnerable ·danthedeckie
Remediation
- Fix · CNA simpleeval (danthedeckie) Fixed in 1.0.5
- Fix · GHSA-44vg-5wv2-h2hg simpleeval (PyPI) Fixed in 1.0.5 Advisory →
Red Hat 2 advisories
- RHSA-2026:37275 Released 2026-07-09 · Red Hat rating CriticalRHOAI 3.3.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9, registry.redhat.io/rhoai/odh-feast-operator-rhel9 +45
- RHSA-2026:10184 Released 2026-04-23 · Red Hat rating ImportantRHOAI 2.25.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:10184 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:37275 |
Not affected: 2 products
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-32640
- 2026-10-03 Alias added: GHSA-44vg-5wv2-h2hg
- 2026-10-25 EPSS moved to the below the 50th percentile
References
Advisory 2
Sources
- CVE-2026-32640 · CVE Program
- CVE-2026-32640 · NVD
- FIRST EPSS
- GHSA-44vg-5wv2-h2hg · GitHub Advisory Database · CC BY 4.0
- CVE-2026-32640 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences