CVE-2026-30273

The pandas-ai library (version v3.0.0 ) contains a SQL injection vulnerability within the pandasai.agent.base._execute_sql_query component. The root cause is a lack of protective measures for SQL query structures. An attacker operating remotely can exploit this flaw to gain read access to arbitra...