PT-2024-36568 · Unknown · Vanna Library

Natan Nehorai · Published 2024-05-31 · Updated 2024-11-25 · CVE-2024-5565

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vanna library (affected versions not specified)

Description The Vanna library is affected by a remote code execution issue due to prompt injection. This allows an attacker to alter the prompt function used for visualized results and run arbitrary Python code. The issue arises when external input is allowed to the library's ask method with visualize set to True, which is the default behavior. This vulnerability has been reportedly exploited in the wild.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Command Injection

Weakness Enumeration

CWE-94

CWE-77

Related Identifiers

CVE-2024-5565

GHSA-7735-W2JP-GVG6

Affected Products

Vanna Library

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2024-5565 · Security Note
• https://osv.dev/vulnerability/GHSA-7735-w2jp-gvg6 · Vendor Advisory
• https://github.com/vanna-ai/vanna · Note
• https://research.jfrog.com/vulnerabilities/vanna-prompt-injection-rce-jfsa-2024-001034449 · Note
• https://twitter.com/JFrogSecurity/status/1806369100416929859 · Twitter Post
• https://twitter.com/JFrogSecurity/status/1809230764648644848 · Twitter Post
• https://t.me/thehackernews/5179 · Telegram Post
• https://t.me/cybersecuritytechnologies/10752 · Telegram Post
• https://twitter.com/transilienceai/status/1856751746640744898 · Twitter Post
• https://twitter.com/cracbot/status/1797870967517315473 · Twitter Post
• https://twitter.com/cyb3rshi3ld/status/1810737236830244912 · Twitter Post
• https://twitter.com/jfrog/status/1808479816187892031 · Twitter Post
• https://t.me/cvenotify/81640 · Telegram Post
• https://twitter.com/transilienceai/status/1860187706514636816 · Twitter Post
• https://twitter.com/transilienceai/status/1859099653448335504 · Twitter Post