What’s Vulnerable › Vulnerabilities

CVE-2026-65702: Vanna 2.0.2 Path Traversal via FileSystemConversationStore

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-23 · updated 2026-10-24
• Weakness: CWE-22

Description

Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration that allows unauthenticated remote attackers to write attacker-controlled JSON files to arbitrary filesystem locations and read conversation metadata from outside the intended store base directory. Attackers can supply path traversal sequences in the conversation_id parameter submitted to the unauthenticated chat API endpoints to escape the base directory during both write and read operations, enabling arbitrary file write with attacker-controlled content and unauthorized file read on the server filesystem.

Affected products

• vanna-ai vanna: through 2.0.2

References

• https://github.com/geo-chen/oss/blob/main/vanna.md
• https://www.vulncheck.com/advisories/vanna-path-traversal-via-filesystemconversationstore

Get alerted when CVE-2026-65702 or the next vulnerability affects your stack