Skip to content
OpenAdvisories

Package · PyPI

vanna

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.3
    CVE-2026-4229

    vanna-ai vanna bigquery_vector.py remove_training_data sql injection

    A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove_training_data of the file src/vanna/legacy/google/bigquery_vector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The ex…

    vanna-ai vanna vanna PyPI
  • High 7.5
    CVE-2024-5753

    Local File Read (LFI) by Prompt Injection via Postgres SQL in vanna-ai/vanna

    vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/…

    vanna-ai vanna-ai/vanna vanna PyPI
  • Critical 9.8
    CVE-2024-5826

    Remote Code Execution via Prompt Injection in vanna-ai/vanna

    In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed b…

    vanna-ai vanna-ai/vanna vanna PyPI
  • High 8.1
    CVE-2024-5565 EPSS 15%

    Prompt Injection in "ask" API with visualization leads to RCE

    The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to…

    vanna PyPI