PYSEC-2026-562 vanna vulnerable to remote code execution caused by prompt injection

In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...

PT-2024-37188

Name of the Vulnerable Software and Affected Versions: vanna-ai/vanna affected versions not specified Description: The issue is related to remote code execution due to prompt injection in the vanna.ask function. This is caused by the lack of a sandbox when executing LLM-generated code, allowing a...