CVE Catalog
CVE-2026-51898
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.16%
4th percentile - higher than 4% of all known CVEs
Summary
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.
Risk Assessment
The risk for the organization is the possibility of remote code execution by an attacker, which could lead to system compromise or data breach.
Recommendation
It is recommended to update pandas-ai to the latest version that fixes this vulnerability and restrict access to code execution functions.
Other vulnerabilities in pandas-ai
Original NVD description (English source)
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS