{"data":{"id":"64421ae2-c542-4ef3-8ed5-9823b8b6d04f","title":"CVE-2024-5826: In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt…","summary":"CVE-2024-5826 affects the latest version of vanna-ai/vanna. The vanna.ask function lacks a sandbox when executing LLM-generated code, so a prompt injection can alter the code run by the exec function in src/vanna/base/base.py. An attacker can use this to achieve remote code execution on the app backend server and potentially gain full control of it. The weakness is classified as CWE-94, Improper Control of Generation of Code ('Code Injection').","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-5826","publishedAt":"2024-06-27T19:15:17.350Z","cveId":"CVE-2024-5826","cweIds":["CWE-94"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["vanna@<= 0.6.2"],"affectedPackageNames":["vanna"],"affectedPackageRefs":["pypi:vanna"],"affectedVendors":[],"affectedVendorsRaw":["vanna-ai/vanna","vanna.ask"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vanna-ai/vanna remote code execution through prompt injection in vanna.ask","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00882,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-rrqq-fv6m-692m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:55:39.741Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}