vanna-ai/vanna vulnerabilities
6 known vulnerabilities in vanna-ai/vanna from Vanna-ai. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.3 High severity
vanna-ai/vanna: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of vanna-ai/vanna when using DuckDB as the database. An attacker can exploit this vulnerability by submitting crafted SQL queries that leverage DuckDB's default features, such as `
- 7.5 High severity
vanna-ai/vanna: Improper Neutralization of Special Elements used in an SQL Command
Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, such as `/etc/pass
- 8.1 High severity
vanna-ai/vanna: Improper Neutralization of Special Elements used in an SQL Command
Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the `generate_sql` function calls `extract_sql` with the LLM response. An attacker can inc
- 7.5 High severity
vanna-ai/vanna: Improper Neutralization of Special Elements used in an SQL Command
vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/e
- 9.8 Critical severity
vanna-ai/vanna: Improper Neutralization of Special Elements used in an SQL Command
Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php
- 9.8 Critical severity
vanna-ai/vanna: Improper Control of Generation of Code
In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by