134 matches found
CVE-2026-51875
In Devika v1.0, the Feature Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, potentially compromising the entire server...
CVE-2026-51874
In Devika v1.0, the Patcher Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace...
CVE-2026-51875
In Devika v1.0 , a path traversal vulnerability exists within the Feature Agent save_code_to_project function. This flaw allows an attacker to write files outside the intended project workspace, which could potentially compromise the entire server. While a proof of concept is mentioned in the met...
CVE-2026-51874
In Devika v1.0 , the Patcher Agent 's save_code_to_project function is susceptible to a path traversal vulnerability (CWE-22). This flaw allows an attacker to write files outside of the intended project workspace. The vulnerability has been observed in the wild, as evidenced by a sighting report....
CVE-2026-51873
Devika v1.0 is vulnerable to a Directory Traversal flaw within the Coder.save_code_to_project function. This vulnerability allows an attacker to manipulate file paths to write files outside the intended project workspace. While no direct exploit code is provided in the documents, a sighting was r...
CVE-2026-51872
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
CVE-2026-51871
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...
CVE-2026-51871
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...
CVE-2026-51872
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
CVE-2026-51872: Improper Control of Generation of Code
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
PT-2026-103619
Name of the Vulnerable Software and Affected Versions Devika version 1.0 Description Code Injection is possible in the execute function within src/agents/runner/runner.py. This issue occurs due to the direct execution of content generated by a Large Language Model LLM, which allows an attacker to...
PT-2026-103620
Name of the Vulnerable Software and Affected Versions Devika version 1.0 Description Code Injection is possible through the run code function within the Runner class located in src/agents/runner/runner.py. Recommendations As a temporary workaround, consider disabling the run code function until a...
CVE-2026-51871
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...
EUVD-2026-90411
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
EUVD-2026-90412
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...
CVE-2026-51872
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
CVE-2026-51871: Improper Control of Generation of Code
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...
CVE-2026-51871
Devika v1.0 is vulnerable to Code Injection within the Runner.execute function located in src/agents/runner/runner.py. The root cause is the direct execution of content generated by a Large Language Model (LLM) , which allows an attacker to achieve arbitrary code execution . As a temporary workar...
CVE-2026-51872
Devika v1.0 is vulnerable to a Code Injection vulnerability (CWE-94) located in the Runner.run_code function within src/agents/runner/runner.py. This flaw allows for the execution of arbitrary code. While the documents confirm the vulnerability exists and provide a CVSS 3.1 base score of 9.8 (CRI...
