AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VannaGHSA-7735-w2jp-gvg6

Vanna prompt injection code execution

Vanna

CVE-2024-5565 · Published May 31, 2024 · updated Jun 29, 2026

Critical8.1
No fix yet
GitHub advisory

The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with "visualize" set to True (default behavior) leads to remote code execution.

Affected versions

PackageAffectedFixed in
vanna
PyPI
<= 0.5.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-77, CWE-94
Also known as
CVE-2024-5565, PYSEC-2026-561

More Vanna advisories

All Vanna