TI-2026-04357 CVE-2026-4997 · GHSA-93x8-h4qh-r29w
Sinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal
Priority HIGH 70
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0.
Sinaptik AI
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Sinaptik AI records in CISA KEVNo Sinaptik AI vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2026-04356 CVE-2026-4996 · GHSA-xxrh-2f9r-39q6
Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection
Priority HIGH 70
A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4.
TI-2026-04358 CVE-2026-4998 · GHSA-89r4-257g-hhwq
Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection
Priority MEDIUM 64
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0.
TI-2024-11472 CVE-2024-12366 · GHSA-vv2h-2w3q-3fx7
Code injection in Sinaptik AI PandasAI
Priority MEDIUM 51
PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language p…