AIKIDO-2026-100021

TL;DR

The serialization codec rebuilds semantic layer resolver trees from tuples stored as xorq tag metadata on serialized expressions. Deserializing a callable reference imports the module named in the payload and uses the qualified name to get a callable that then runs when the expression is evaluated. A crafted reference such as builtins.eval lets untrusted serialized input import arbitrary modules, run import time side effects, and invoke chosen callables, leading to remote code execution. The fix validates callable module roots and qualified names on serialization and deserialization and re-checks the resolved object before it is used.