critical9.8

CVE-2026-51898

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.

Impact

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://gist.github.com/Ro1ME/6cc410b487a2374fdd9e8749621f3135
https://github.com/sinaptik-ai/pandas-ai/issues/1893