Is there a public PoC exploit available for EUVD-2026-19121?

Yes, a public proof-of-concept exploit is available for EUVD-2026-19121. Prioritise patching immediately. EPSS: 0.0%.

Premsql EUVD-2026-19121

Q: What is the CVSS score of EUVD-2026-19121?

EUVD-2026-19121 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-5594 LOW

Code Injection (CWE-94)

2026-04-05 VulDB

GHSA-2vh4-chw9-2wfj

RCE Code Injection Premsql

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 18:45 euvd

EUVD-2026-19121

Analysis Generated

Apr 05, 2026 - 18:45 vuln.today

CVE Published

Apr 05, 2026 - 18:30 nvd

MEDIUM 5.3

DescriptionCVE.org

A weakness has been identified in premAI-io premsql up to 0.2.1. Affected is the function eval of the file premsql/agents/baseline/workers/followup.py. This manipulation of the argument result causes code injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote code execution in premAI-io premsql up to version 0.2.1 allows authenticated remote attackers to achieve arbitrary code execution through code injection via manipulation of the result argument in the eval function located in premsql/agents/baseline/workers/followup.py. Publicly available exploit code exists for this vulnerability, and the vendor has not responded to early disclosure attempts, leaving affected deployments without an official patch.

Technical ContextAI

premAI-io premsql is a Python-based SQL agent library that processes and evaluates SQL-related operations. The vulnerability stems from unsafe use of the eval() function in the followup.py worker module, which is classified as CWE-94 (Improper Control of Generation of Code or Code Injection). The eval() function executes arbitrary Python code derived from user-supplied input (the result argument), bypassing any code boundary restrictions. This is a classic code injection vulnerability pattern where dynamically constructed code is executed without proper sanitization or sandboxing. The attack surface is exposed through the baseline agents workflow, which processes followup queries and results.

RemediationAI

No vendor-released patch identified at time of analysis; the vendor was contacted early but has not responded. Users of premAI-io premsql should immediately upgrade to a version greater than 0.2.1 if one becomes available, or discontinue use of the affected component until vendor updates are released. As an interim mitigation, restrict network access and authentication to the premsql agent endpoints to trusted users only, implement strict input validation on result arguments before they reach the eval function if source code modification is feasible, and monitor for suspicious code execution patterns within premsql process logs. Additional guidance may be found in VulDB records at https://vuldb.com/vuln/355388 and the public issue documentation at https://github.com/Ka7arotto/cve/blob/main/premsql-rce/issue.md.