AIKIDO-2026-858122

TL;DR

The calculator tool validates expressions against an AST allowlist that is meant to permit only mathematical syntax and block code execution. String literals were still allowed as arguments, and several SymPy helpers reachable in the evaluation namespace (for example N, simplify, solve) re-parse string arguments through sympify, which evaluates them with full builtins and escapes the restricted namespace used for the top-level expression. An expression such as N("__import__('os').system('id')") therefore executed arbitrary code despite the allowlist. The fix rejects string literals except as positional arguments to a small allowlist of safe constructors (Symbol, symbols, Rational, Integer, Float).