vanna-ai

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

vanna-ai records in CISA KEV

No vanna-ai vulnerabilities are listed in CISA KEV.

Records

16 records

TI-2024-05403 CVE-2024-5827 · GHSA-c89v-fg7j-r5qj

Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna

HIGH 82

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03424 Published 2024-06-28 No fix listed CWE-89

TI-2026-46836 CVE-2026-65702 · GHSA-xxc9-8wc2-p57g

Vanna 2.0.2 Path Traversal via FileSystemConversationStore

HIGH 77

Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration that allows unauthenticated remote attackers to write attacker-controlled JSON files to arbitrary fil…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0058 Published 2026-07-23 No fix listed CWE-22

TI-2024-05402 CVE-2024-5826 · GHSA-rrqq-fv6m-692m

Remote Code Execution via Prompt Injection in vanna-ai/vanna

HIGH 76

In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00882 Published 2024-06-27 No fix listed CWE-94

TI-2024-07510 CVE-2024-8099 · GHSA-cppx-6f25-3qxc

Server-Side Request Forgery (SSRF) in vanna-ai/vanna

HIGH 75

A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of vanna-ai/vanna when using DuckDB as the database.

CVSS 3.0HIGH 8.3 Network No auth No interaction EPSS 0.00358 Published 2025-03-20 No fix listed CWE-918

TI-2024-07469 CVE-2024-8055 · GHSA-63gf-x2fr-8r32

Local File Read (LFI) by Prompt Injection via SnowFlake SQL in vanna-ai/vanna

HIGH 72

Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2025-03-20 No fix listed CWE-89

TI-2024-05342 CVE-2024-5753 · GHSA-mwxm-35f8-6vg2

Local File Read (LFI) by Prompt Injection via Postgres SQL in vanna-ai/vanna

HIGH 72

vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2024-07-05 No fix listed CWE-89

TI-2026-06105 CVE-2026-6977 · GHSA-jpf3-pmmr-rr7v

vanna-ai vanna Legacy Flask API improper authorization

HIGH 70

A security vulnerability has been detected in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00278 Published 2026-04-25 No fix listed CWE-266

TI-2026-04652 CVE-2026-5320 · GHSA-j638-g9qc-36f4

vanna-ai vanna Chat API Endpoint v2 missing authentication

HIGH 70

A vulnerability was detected in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-04-02 No fix listed CWE-287

TI-2026-03678 CVE-2026-4231 · GHSA-c8j7-9pjj-vhm4

vanna-ai vanna Endpoint init.py run_sql server-side request forgery

HIGH 70

A vulnerability was found in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00295 Published 2026-03-16 No fix listed CWE-918

TI-2026-03676 CVE-2026-4229 · GHSA-6mj8-jmp2-g8q7

vanna-ai vanna bigquery_vector.py remove_training_data sql injection

HIGH 70

A flaw has been found in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0027 Published 2026-03-16 No fix listed CWE-74

TI-2024-07198 CVE-2024-7764 · GHSA-7g3f-q846-q9hx

SQL Injection in vanna-ai/vanna

HIGH 70

Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.00784 Published 2025-03-20 No fix listed CWE-89

TI-2024-06343 CVE-2024-6841 · GHSA-9vwq-rwcj-cmcg

CSRF in vanna-ai/vanna

MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability exists in the latest commit (56b782bcefd2e59b19cd7ba7878b95f54884f502) of the vanna-ai/vanna repository.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00249 Published 2025-03-20 No fix listed CWE-352

TI-2026-03922 CVE-2026-4513 · GHSA-jvhj-49gh-v77p

vanna-ai vanna base.py ask sql injection

MEDIUM 57

A vulnerability was detected in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-03-21 No fix listed CWE-74

TI-2026-03920 CVE-2026-4511 · GHSA-7ggr-c9vj-59r7

vanna-ai vanna legacy exec injection

MEDIUM 57

A security vulnerability has been detected in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-03-21 No fix listed CWE-707

TI-2026-03677 CVE-2026-4230 · GHSA-vrff-438g-6h73

vanna-ai vanna Endpoint init.py update_sql sql injection

MEDIUM 57

A vulnerability has been found in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-03-16 No fix listed CWE-74

TI-2026-04653 CVE-2026-5321 · GHSA-fp27-q2f5-phx3

vanna-ai vanna FastAPI/Flask Server cross-domain policy

LOW 23

A flaw has been found in vanna-ai vanna up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00165 Published 2026-04-02 No fix listed CWE-346

Open these records in search →

Critical	2
High	5
Medium	9
Low	0
No CVSS	0