Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Devika 1.0 lets attacker run any code

CVE-2026-51871 · published 18 days ago
Summary

The Devika version 1.0 application can execute commands that it receives from a language model without checking them first. This means a malicious user could cause the software to run arbitrary code on the host system, potentially compromising data and operations. Update to a patched version or apply a filter that validates and sanitizes any generated content before execution.

Original advisory text
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execu...
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published30 Sep 2026
Updated15 Oct 2026
First seen30 Sep 2026
Sources
CVE-2026-51871 · NVD
CVE-2026-51871 · MITRE
Track software like this
Free during beta