CVE-2026-4231 vanna-ai vanna Endpoint __init__.py run_sql server-side request forgery

A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function updatesql/runsql of the file src/vanna/legacy/flask/init.py of the component Endpoint. Performing a manipulation results in server-side request forgery. The attack may be initiated remotely. Th...

CVE-2026-4231

CVE-2026-4231 affects vanna-ai vanna up to 2.0.2 . The vulnerability is in the Endpoint component, specifically the function update_sql/run_sql in src/vanna/legacy/flask/init .py, allowing server-side request forgery . The attack can be performed remotely and the exploit has been made public. The...