CVE-2026-47103 — Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

Affected: fgmacedo python-statemachine

Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML documents containing crafted `<data expr="...">` attributes evaluated unsafely. The SCXMLProcessor passes attacker-controlled expression strings through a call chain ending in Python's built-in eval() without sandboxing, enabling arbitrary code execution in the context of the hosting process.

GHSA-v4jc-pm6r-3vj8 — python-statemachine SCXML Eval Injection

Affected: PyPI: python-statemachine

### Summary

python-statemachine 3.1.2 evaluates `<data expr="...">` attributes in SCXML documents using Python's `eval()`. Any application that passes attacker-controlled SCXML content to `SCXMLProcessor` is vulnerable to arbitrary code execution in the context of the hosting process.

### Details

`SCXMLProcessor.parse_scxml_file()` processes SCXML documents and evaluates `<data>` element `expr` attributes via the following call chain:

``` SCXMLProcessor.parse_scxml_file() SCXMLProcessor.process_definition() create_datamodel_action_callable() _create_dataitem_callable() _eval() eval() ```

`_eval()` calls Python's built-in `eval()` directly on the expression string without sandboxing or restriction.

### PoC

``` 1. Install: pip install python-statemachine==3.1.2

2. Create an SCXML file containing: <data id="x" expr="__import__('pathlib').Path('marker.txt').write_text('pwned')"/>

3. Run: SCXMLProcessor.parse_scxml_file(DATA_EXPR_CHART) SCXMLProcessor.start()

4. During start(), <data expr> reaches _eval(), which calls eval().

5. Result: data_marker_before_start: False data_marker_after_start: True success: True ```

### Impact

This is an eval injection vulnerability (CWE-95). Remote or local code execution depending on whether the consuming application accepts SCXML content from remote users, uploaded files, configuration, plugins, or other untrusted sources.

Most recent entries from all

CVE-2026-47103 — Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

GHSA-v4jc-pm6r-3vj8 — python-statemachine SCXML Eval Injection