Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell() syntax within parameter default values appea…

The Intake data package prior to version 2.0.9 contains a command injection vulnerability where shell() syntax within parameter default values is automatically expanded during catalog parsing. Malicious catalog YAML files can execute embedded commands on the host system when accessed. The vulnerability occurs when users load untrusted catalogs containing shell(<command>) parameter defaults. Version 2.0.9 fixes the issue by setting getshell to False by default. This represents a significant security risk for data analysis environments using the Intake package.