Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/30 9:17 p.m.•23 views

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

9.8CVSS0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-103619

Name of the Vulnerable Software and Affected Versions Devika version 1.0 Description Code Injection is possible in the execute function within src/agents/runner/runner.py. This issue occurs due to the direct execution of content generated by a Large Language Model LLM, which allows an attacker to...

9.8CVSS6.1AI score0.00403EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/30 12:00 a.m.•18 views

EUVD-2026-90412

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

6.4AI score0.00403EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 12:00 a.m.•44 views

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

0.00403EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•10 views

CVE-2026-51871: Improper Control of Generation of Code

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

9.8CVSS6.4AI score0.00403EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 12:00 a.m.•10 views

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

6.4AI score0.00403EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 12:00 a.m.•43 views

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection within the Runner.execute function located in src/agents/runner/runner.py. The root cause is the direct execution of content generated by a Large Language Model (LLM) , which allows an attacker to achieve arbitrary code execution . As a temporary workar...

9.8CVSS6.4AI score0.00403EPSS
SaveExploits0References2
Rows per page
Query Builder