CVE-2026-51875

Summary

The flaw allows attackers to write files outside the intended project workspace, potentially compromising the entire server through path traversal.

Exploitability

Exploitation is relatively easy given the attacker can write files outside the intended project, requiring only knowledge of the vulnerable function.

Blast radius

If exploited, the entire server could be compromised, leading to data loss or unauthorized code execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Devika v1.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.