PT-2026-25639 · Vanna-Ai · Vanna

Eric-Y + 1 · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-4229

Mitre

CVSS v3.1

7.3

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove training data of the file src/vanna/legacy/google/bigquery vector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4229

Affected Products

Vanna

References · 6

• 🔥 https://gist.github.com/YLChen-007/b4f326eaecc29b192cf93dc5d6bc0623 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4229 · Security Note
• https://vuldb.com/?ctiid.351152 · Note
• https://vuldb.com/?id.351152 · Note
• https://vuldb.com/?submit.771214 · Note
• https://twitter.com/CVEnew/status/2033583685900144954 · Twitter Post