HIGH 8.1

PYSEC-2026-561

Vanna prompt injection code execution

Details

The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with "visualize" set to True (default behavior) leads to remote code execution.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / vanna

Introduced in: 0

No fixed version published yet for vanna (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-5565 [ADVISORY]
https://github.com/vanna-ai/vanna [PACKAGE]
https://research.jfrog.com/vulnerabilities/vanna-prompt-injection-rce-jfsa-2024-001034449 [WEB]
https://pypi.org/project/vanna [PACKAGE]
https://github.com/advisories/GHSA-7735-w2jp-gvg6 [ADVISORY]