CyberRota Analysis
AI-GeneratedThe Patcher Agent in Devika v1.0 is vulnerable to a path traversal attack through the save_code_to_project function, enabling unauthorized file writing outside the designated project workspace. This flaw could lead to data leakage or unauthorized access to sensitive files on the server. Organizations using this version of Devika should prioritize remediation to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace.