AIKIDO-2026-520986
uproot is vulnerable to Code Injection
78
High Risk
This Affects:
uprootTL;DR
Uproot dynamically generates and compiles Python reader classes from ROOT TStreamerInfo metadata found in a file. File-controlled streamer fields such as element names are interpolated into that generated source without safe quoting (no repr()/!r), and a dimension specification parsed from metadata is passed to eval. A crafted ROOT file can embed Python expressions in these metadata fields that are then executed in the context of the process opening the file, resulting in arbitrary code execution. The fix sanitizes interpolated identifiers used in generated code and replaces eval with ast.literal_eval when parsing dimension specifications.
Who does this affect?
You are affected if you are running a version in the vulnerable range and your application opens or processes untrusted, externally supplied ROOT files.
Background info
uproot is vulnerable to Code Injection in versions 0.0.1 - 5.7.4.
How to fix this
Upgrade the uproot library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant