VannaGHSA-mwxm-35f8-6vg2

Vanna vulnerable to SQL Injection

CVE-2024-5753 · Published Jul 5, 2024 · updated Jul 7, 2026

High7.5

No fix yet

vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as pg_read_file(). This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like /etc/passwd, by exploiting the exposed SQL queries via a Python Flask API.

Affected versions

Package	Affected	Fixed in
vanna PyPI	<= 0.3.4	No fix yet

Details and references

CVSS 3.0: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from: GitHub (reviewed advisory)
Weakness: CWE-200, CWE-89
Also known as: CVE-2024-5753, PYSEC-2026-2002

More Vanna advisories

All Vanna

Medium 7.3Mar 16

Vanna has a SQL injection in the remove_training_data functionCVE-2026-4229no fix yet Critical 9.8Jun 27, 2024

vanna vulnerable to remote code execution caused by prompt injectionCVE-2024-5826no fix yet Critical 8.1May 31, 2024

Vanna prompt injection code executionCVE-2024-5565no fix yet