VannaGHSA-7735-w2jp-gvg6
Vanna prompt injection code execution
Critical8.1CVE-2024-5565 · Published May 31, 2024 · updated Jun 29, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| vanna PyPI | <= 0.5.5 | No fix yet |
Details and references
The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with "visualize" set to True (default behavior) leads to remote code execution.
More Vanna advisories
All Vanna| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 272024 | vanna vulnerable to remote code execution caused by prompt injection CVE-2024-5826Critical9.8no fix yet | Critical9.8 | No fix yet |
| Jul 52024 | Vanna vulnerable to SQL Injection CVE-2024-5753High7.5no fix yet | High7.5 | No fix yet |
| Mar 16 | Vanna has a SQL injection in the remove_training_data function CVE-2026-4229Medium7.3no fix yet | Medium7.3 | No fix yet |