CVE-2024-5827

CRITICALNuclei

Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-5827 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 5, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 1, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Vanna

Browse Vanna-ai / Vanna

Default status: affected

VulnCheck, CVE List0.3.4affected

vanna-ai/vanna

Browse vanna-ai / vanna-ai/vanna
CVE ListThrough latestaffected

Nuclei templates

1
ProjectDiscoveryCRITICALVanna - SQL injectionCVSS 9.8

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors.

Impact

Unauthenticated attackers can exploit SQL injection to inject malicious training data and write arbitrary files on the victim's filesystem, including PHP backdoors, leading to remote code execution.

Remediation

Update Vanna to version 0.3.5 or later to address the SQL injection vulnerability in the DuckDB integration.

WeaknessesCWE-434
Authorsolfloralo, nukunga, harksu, nechyo, gy741
Template tagscvecve2024vannasqlivkevvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
FOFA: body='vanna.ai'
https://huntr.com/bounties/a3f913d6-c717-4528-b974-26d8d9e839ca https://nvd.nist.gov/vuln/detail/CVE-2024-5827 https://huntr.com/bounties/e4e64a51-618b-41d0-8f56-1d2146d8825e https://github.com/fkie-cad/nvd-json-data-feeds

Source: ProjectDiscovery

References

2