CVE-2026-51872

Summary

Devika v1.0 is vulnerable to Code Injection, allowing attackers to execute arbitrary code via the Runner.run_code function, leading to full system compromise.

Exploitability

Exploitation is relatively straightforward given the code injection vulnerability, requiring an attacker to craft and submit malicious code.

Blast radius

If exploited, this vulnerability could result in complete system compromise, potentially leading to data theft, system destruction, or further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Devika v2.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.