Is CVE-2026-51871 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-51871 being exploited in the wild.

How severe is CVE-2026-51871?

Informational severity, published 30 September 2026.

Is there a fix for CVE-2026-51871?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-51871 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-51871?

Check whether you run Stitionai Devika at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-51871: Devika code injection in Runner.execute function

CVE-2026-51871 · Severity: info · Published 2026-09-30

Devika is an open-source AI agent framework that executes code based on instructions from large language models. The Runner.execute function directly executes commands generated by the LLM without validating or sanitizing them, allowing an attacker to inject malicious commands through carefully crafted prompts and achieve arbitrary code execution with the privileges of the application process.

Technologies: Stitionai Devika. Vendors: Stitionai.

Quick answers

Is CVE-2026-51871 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-51871 being exploited in the wild.
How severe is CVE-2026-51871?: Informational severity, published 30 September 2026.
Which products and versions are affected?: Stitionai Devika v1.0.
Is there a fix for CVE-2026-51871?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-51871 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-51871?: Check whether you run Stitionai Devika at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in src/agents/runner/runner.py where the Runner.execute function accepts LLM-generated commands and forwards them to an execution endpoint without validation, sanitization, or command whitelisting. An attacker can manipulate the LLM input through prompt injection to execute arbitrary system commands, leading to full system compromise depending on service permissions. The affected versions lack sandboxing or input validation mechanisms to prevent code injection.

Affected products

stitionai Devika v1.0

Timeline

2026-05-23: disclosed
2026-09-30: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.