https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:01:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277202 EUVD-2026-277202 https://cve.radiocsirt.org/vuln/euvd-2026-277202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33310 <p>Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. Version 2.0.9 mitigates the issue by making getshell False by default everywhere.</p> <p>Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. Version 2.0.9 mitigates the issue by making getshell False by default everywhere.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33310 https://cve.radiocsirt.org/vuln/ghsa-37g4-qqqv-7m99 <p><strong>Affected:</strong> PyPI: intake</p> <p>### Summary The shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. This behavior could potentially be classified as OS Command Injection / Unsafe Shell Expansion.</p> <p>### Details The issue appears to originate from how parameter default values are expanded when a catalog source is accessed.</p> <p>During catalog loading and source access:</p> <p>Intake resolves parameter default values The function responsible for expanding defaults processes the shell() syntax The shell expression triggers a subprocess execution Because this occurs during catalog evaluation, the command may execute before the user explicitly interacts with the dataset itself.</p> <p>Affected logic appears to involve: ``` expand_defaults() ``` and related parameter parsing mechanisms.</p> <p>### PoC exploit.yaml ``` metadata: version: 1 sources: rce_test: driver: csv description: &#34;Testing shell expansion in parameters&#34; args: urlpath: &#34;{{ cmd_exec }}&#34; parameters: cmd_exec: display_name: &#34;Test Parameter&#34; type: str default: &#34;shell(touch /tmp/intake_rce_test)&#34; ```</p> <p>reproduce.py ``` import intake import os</p> <p>PROOF_FILE = &#34;/tmp/intake_rce_test&#34;</p> <p>if os.path.exists(PROOF_FILE):…</p> <p><strong>Affected:</strong> PyPI: intake</p> <p>### Summary The shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. This behavior could potentially be classified as OS Command Injection / Unsafe Shell Expansion.</p> <p>### Details The issue appears to originate from how parameter default values are expanded when a catalog source is accessed.</p> <p>During catalog loading and source access:</p> <p>Intake resolves parameter default values The function responsible for expanding defaults processes the shell() syntax The shell expression triggers a subprocess execution Because this occurs during catalog evaluation, the command may execute before the user explicitly interacts with the dataset itself.</p> <p>Affected logic appears to involve: ``` expand_defaults() ``` and related parameter parsing mechanisms.</p> <p>### PoC exploit.yaml ``` metadata: version: 1 sources: rce_test: driver: csv description: &#34;Testing shell expansion in parameters&#34; args: urlpath: &#34;{{ cmd_exec }}&#34; parameters: cmd_exec: display_name: &#34;Test Parameter&#34; type: str default: &#34;shell(touch /tmp/intake_rce_test)&#34; ```</p> <p>reproduce.py ``` import intake import os</p> <p>PROOF_FILE = &#34;/tmp/intake_rce_test&#34;</p> <p>if os.path.exists(PROOF_FILE):…</p> https://cve.radiocsirt.org/vuln/ghsa-37g4-qqqv-7m99 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10426-1 <p>python311-intake-2.0.9-1.1 on GA media</p> <p>python311-intake-2.0.9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10426-1 https://cve.radiocsirt.org/vuln/pysec-2026-2185 <p><strong>Affected:</strong> PyPI: intake</p> <p>Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. Version 2.0.9 mitigates the issue by making getshell False by default everywhere.</p> <p><strong>Affected:</strong> PyPI: intake</p> <p>Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell(&lt;command&gt;), the command may be executed when the catalog source is accessed. This means that if a user loads a malicious catalog YAML, embedded commands could execute on the host system. Version 2.0.9 mitigates the issue by making getshell False by default everywhere.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2185