CVE-2024-12366: PandasAI prompt injection leads to arbitrary Python code execution

Summary

CVE-2024-12366 affects PandasAI, which uses an interactive prompt function that is vulnerable to prompt injection. Attackers can run arbitrary Python code through it, leading to Remote Code Execution (RCE) in place of the intended natural language explanation from the LLM. NVD has not yet provided an assessment, and the entry was published 02/11/2025 with source CERT/CC.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• pandasaiPyPINo LLM dependency detected

Topics

• Prompt injection and jailbreaks

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database