Vulnerability · Published Jun 28, 2024 · Assigned by @huntr_ai
CVE-2024-5827Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna
Critical 9.8
In plain English
A critical-severity SQL injection in vanna-ai/vanna from vanna-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| vanna-ai | vanna-ai/vanna | unspecified – through latest |
Weakness: CWE-89 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H