PT-2025-12302 · Pandas+1 · Pandas+1

Published 2025-03-20 · Updated 2025-08-18 · CVE-2025-0185

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dify Tools versions prior to the fixed version

Description A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version. The vulnerability occurs in the function vn.get training plan generic(df information schema), which does not properly sanitize user inputs before executing queries using the Pandas library. This can potentially lead to Remote Code Execution (RCE) if exploited.

Recommendations As a temporary workaround, consider disabling the vn.get training plan generic function until a patch is available. Restrict access to the Vanna module to minimize the risk of exploitation. Avoid using unsanitized inputs in the df information schema variable until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-0185

Affected Products

Dify Tools

Pandas

References · 9

• 🔥 https://huntr.com/bounties/7d9eb9b2-7b86-45ed-89bd-276c1350db7e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0185 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0185 · Vendor Advisory
• https://reddit.com/r/CyberDudeBivash/comments/1mtntya/daily_cve_roundup_august_18_2025_by · Reddit Post
• https://twitter.com/CVEnew/status/1903021681376903471 · Twitter Post
• https://t.me/cvetracker/19507 · Telegram Post
• https://twitter.com/CveFindCom/status/1902669638275564008 · Twitter Post
• https://t.me/cvedetector/20725 · Telegram Post
• https://t.me/cvenotify/116599 · Telegram Post