{"data":{"id":"116efa2e-505f-4124-bd11-fb3494a477ab","title":"CVE-2024-12366: PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that…","summary":"CVE-2024-12366 affects PandasAI, which uses an interactive prompt function that is vulnerable to prompt injection. Attackers can run arbitrary Python code through it, leading to Remote Code Execution (RCE) in place of the intended natural language explanation from the LLM. NVD has not yet provided an assessment, and the entry was published 02/11/2025 with source CERT/CC.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-12366","publishedAt":"2025-02-11T13:15:29.193Z","cveId":"CVE-2024-12366","cweIds":null,"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["pandasai@<= 2.4.2"],"affectedPackageNames":["pandasai"],"affectedPackageRefs":["pypi:pandasai"],"affectedVendors":[],"affectedVendorsRaw":["PandasAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PandasAI prompt injection leads to arbitrary Python code execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01214,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-vv2h-2w3q-3fx7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:35.689Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}