CVE-2026-51871
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content.
Risk Assessment
Risk of remote code execution, potentially leading to full system compromise or data breach.
Recommendation
Update Devika to the latest version or apply mitigations such as validating LLM output before execution.
Other vulnerabilities in Devika
Original NVD description (English source)
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS