AIKIDO-2026-607274

TL;DR

The query() method on Attachments builds a filter expression from the caller's query string and passes it to eval() with Python builtins reachable. Because the evaluation namespace is not sandboxed, a query string that reaches this method can execute arbitrary Python code, such as importing modules, running operating system commands, or reading files. Applications that pass untrusted input into the attachment query are exposed to arbitrary code execution. The fix parses the query into a restricted AST that only allows field access, comparisons, whitelisted string methods, and re matching, raising ValueError on anything else.