CVE-2026-51872 | stitionai Devika 1.0 Runner runner.py Runner.run_code code injection

September 30, 2026 Yanac

A vulnerability was found in stitionai Devika 1.0 and classified as critical. Affected is the function Runner.run_code of the file src/agents/runner/runner.py of the component Runner. Executing a manipulation can lead to code injection.

The identification of this vulnerability is CVE-2026-51872. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More