Attack Chain

1. An attacker crafts a malicious ROOT file containing specially malformed TStreamerInfo records.
2. Within these TStreamerInfo records, the attacker embeds Python expression-breaking content into streamer metadata fields, such as streamer element names.
3. The attacker delivers this crafted ROOT file to a victim, potentially through email, download, or by placing it in a shared repository.
4. A victim's application, which uses the uproot library, attempts to open or process the malicious ROOT file.
5. uproot dynamically generates Python class source code based on the TStreamerInfo records, interpolating the attacker-controlled metadata fields directly into the source.
6. Due to the lack of safe quoting, the injected Python expression-breaking content becomes part of the generated Python code.
7. uproot compiles and invokes the corresponding reader method, causing the injected Python expression to be evaluated.
8. Arbitrary Python code is executed on the victim's system with the privileges of the affected application, leading to full system compromise or data exfiltration.

Impact

Successful exploitation of CVE-2026-9147 results in arbitrary Python code execution on the system processing the malicious ROOT file. This allows an attacker to take complete control of the affected application and potentially the underlying operating system. The specific damage could range from data theft and modification to the installation of additional malware, remote access tools, or complete system compromise. Organizations processing ROOT files from untrusted sources, particularly in scientific research, data analysis, or high-energy physics domains, are at risk. No specific victim counts or targeted sectors are provided, but any application using uproot to handle external ROOT files is potentially vulnerable.

Recommendation

• Patch CVE-2026-9147 by upgrading the uproot library to a version that addresses this vulnerability immediately across all affected systems.
• Implement strict validation and sanitization for all ROOT files ingested from untrusted or external sources to prevent the processing of malicious content.
• Reduce the attack surface by limiting the types of files applications can process and ensuring uproot-using applications run with the least necessary privileges.
• Monitor process creation logs for unusual Python script executions originating from applications that typically process data files, which could indicate exploitation of CVE-2026-9147.