SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-51872

Low risk· EPSS 10%
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

10th percentile - higher than 10% of all known CVEs

Summary

Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.

Risk Assessment

Risk of remote code execution, potentially leading to full system compromise or data breach.

Recommendation

Update Devika to the latest version or apply mitigations such as sandboxing to restrict code execution.

Other vulnerabilities in Devika

Original NVD description (English source)

Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS