CVE-2026-4230

MEDIUM

vanna-ai vanna Endpoint init.py update_sql sql injection

Title source: cna

Description

A vulnerability has been found in vanna-ai vanna up to 2.0.2. Affected is the function update_sql of the file src/vanna/legacy/flask/__init__.py of the component Endpoint. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-351153 | vanna-ai vanna Endpoint __init__.py update_sql sql injection

https://vuldb.com/?id.351153

Signature, Permissions Required signature permissions-required

VDB-351153 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/?ctiid.351153

Third Party Advisory third-party-advisory

Submit #771215 | vanna-ai Vanna 2.0.2 SQL Injection (CWE-89)

https://vuldb.com/?submit.771215

Exploit exploit

https://gist.github.com/YLChen-007/48b86c2365e5ebf6923d5f14491b4329

Scores

CVSS v3 6.3

EPSS 0.0019

EPSS Percentile 9.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-74 CWE-89

Status published

Products (3)

vanna-ai/vanna 2.0.0

vanna-ai/vanna 2.0.1

vanna-ai/vanna 2.0.2

Published Mar 16, 2026

Tracked Since Mar 16, 2026