CVE-2026-55585

Name of the Vulnerable Software and Affected Versions QWED versions prior to 5.1.2

Description Authenticated users can execute arbitrary Python code within the API server process because the qwed package passes user-controlled math expressions to the SymPy parse expr() function without restricting the global dict and local dict namespaces. Since parse expr() internally utilizes Python's eval(), this allows for full system compromise, including reading or writing files, executing operating system commands, and accessing data from other tenants in shared deployments.

Technical details include two vulnerable paths:

Attackers can obtain the necessary authentication by using the default-enabled POST /auth/signup endpoint to create a tenant account and the POST /auth/api-keys endpoint to generate an API key.

Recommendations Update QWED to version 5.1.2. As a temporary mitigation, restrict access to the POST /verify/math and POST /verify/batch endpoints or disable the POST /auth/signup endpoint to prevent unauthorized account creation.