Skip to content
Threat Feed
Subscribe

Vendor

Sinaptik AI

1 brief RSS
high advisory

PandasAI Code Injection Vulnerability (CVE-2026-4998)

A code injection vulnerability (CVE-2026-4998) exists in Sinaptik AI PandasAI versions up to 3.0.0, enabling remote attackers to execute arbitrary code via the CodeExecutor.execute function within the Chat Message Handler component.

PandasAI code-injection cve-2026-4998
2r 1t