AIKIDO-2026-727032

TL;DR

The Numo::NArray.parse method converts a text representation of an array into an NArray. Each whitespace-delimited token in the input is passed to Ruby eval, so every token is executed as Ruby code. Parsing text that originates from a file, an upload, or a request parameter therefore runs arbitrary code in the host process. The fix parses each token only as a numeric or true/false/nil literal and rejects anything else.