CVE-2024-5827: Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-06-28 · updated 2026-06-17
Weakness: CWE-89

Description

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors.

Affected products

vanna-ai vanna: 0.3.4

References

https://huntr.com/bounties/e4e64a51-618b-41d0-8f56-1d2146d8825e
https://huntr.com/bounties/e4e64a51-618b-41d0-8f56-1d2146d8825e

Get alerted when CVE-2024-5827 or the next vulnerability affects your stack