Unrestricted getattr() in DSL evaluator enables code execution

[consigcody94]

Found via code audit. expression.py:90. No attribute allowlist. MRO traversal accesses arbitrary classes.

[11cookies11]

Thanks for the report!

I haven’t fully verified the impact yet, but the concern makes sense. Unrestricted attribute access in an expression evaluator can be dangerous, especially if it allows traversal through __class__, __mro__, or __subclasses__.

I’ll investigate expression.py:90 and check whether attribute access needs to be restricted with an allowlist or disabled entirely. I’ll also add regression tests around these traversal patterns.

Thanks for taking the time to audit this.