CVE-2026-5594 | premAI-io premsql up to 0.2.1 followup.py eval result code injection

A vulnerability marked as critical has been reported in premAI-io premsql up to 0.2.1. Affected is the function eval of the file premsql/agents/baseline/workers/followup.py. This manipulation of the argument result causes code injection.

This vulnerability is tracked as CVE-2026-5594. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.