EUVD-2026-90411

Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...

CVE-2026-51872

Devika v1.0 is vulnerable to Code Injection due to an issue in the Runner.run_code function located at src/agents/runner/runner.py . While specific exploitation details and remediation instructions are not provided in the documents, a sighting of this vulnerability was reported in a public gist.