CVE-2026-47103: Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

Synopsis

Remote code execution via unsafe eval() in Python StateMachine affects fgmacedo/python-statemachine versions 3.0.0 through 3.1.x. The vulnerability is reachable over the network with no authentication required: an attacker supplies a malicious SCXML document containing a crafted <data expr="..."> attribute, which the SCXMLProcessor passes to Python's built-in eval() without any sandboxing. Successful exploitation gives the attacker arbitrary code execution inside the hosting process. A patched-image rebuild at version 3.2.0 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable SCXML parsing endpoint must be reachable over the network; an attacker delivers the malicious document via any remote HTTP or API call that the application exposes.

• AuthenticationNot required

  No account or session credential is needed; the attacker can trigger eval() injection as an unauthenticated caller.

• Victim interactionNot required

  No user action is required; the application processes the attacker-supplied SCXML document automatically without any human interaction.

• Attack complexityDetail

  Attack complexity is low: the exploit requires no race condition, specific memory layout, or environmental precondition and is reliable on any vulnerable instance.

Blast Radius

• Attacker executes arbitrary Python code inside the hosting process, giving full control over application logic and runtime state.
• All data readable by the hosting process, including secrets, environment variables, and in-memory credentials, is exposed.
• Attacker can write, overwrite, or delete files accessible to the process, modifying persisted application state or configuration.
• The hosting service can be crashed or hijacked to serve as a pivot point for further network access within the same container or pod environment.