CVE-2026-51898

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-02

Last updated on: 2026-10-06

Assigner: MITRE

Description

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-02

Last Modified

2026-10-06

Generated

2026-10-19

AI Q&A

2026-10-02

EPSS Evaluated

2026-10-18

NVD

CVE-2026-51898

EUVD

EUVD-2026-91705

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This is a code injection vulnerability in pandas-ai version 3.0.0. It affects the CodeExecutor.execute function which runs LLM-generated Python code directly using exec() without sandboxing or input validation. By default, the sandbox is disabled, allowing arbitrary code execution on the host system.

Detection Guidance

To detect this vulnerability, check if pandas-ai version 3.0.0 is installed and verify if the CodeExecutor.execute function in pandasai/core/code_execution/code_executor.py is present without sandboxing. Look for unexpected file creations or system commands in logs, such as files named /tmp/pandasai_rce_proof.txt.

Impact Analysis

An attacker could exploit this to run malicious commands on your system. This includes creating, reading, modifying, or deleting files, executing system commands, accessing sensitive data, or exfiltrating information over the network. The impact depends on the system's permissions and configuration.

Compliance Impact

This vulnerability could lead to data breaches, unauthorized access, or data exfiltration, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using this software may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Immediately upgrade pandas-ai to a patched version if available. If not, disable or remove pandas-ai 3.0.0. Enable sandboxing for the CodeExecutor.execute function if possible. Monitor system logs for suspicious activity and restrict access to the application.

Hi! I’m here to help you understand CVE-2026-51898. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70