CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
2DescriptionNVD
Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the generate_sql function calls extract_sql with the LLM response. An attacker can include a semi-colon between a search data field and their own command, causing the extract_sql function to remove all LLM generated SQL and execute the attacker's command if it passes the is_sql_valid function. This allows the execution of user-defined SQL beyond the expected boundaries, notably the trained schema.
AnalysisAI
Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the generate_sql function calls extract_sql with the LLM response. An attacker can include a semi-colon between a search data field and their own command, causing the extract_sql function to remove all LLM generated SQL and execute the attacker's command if it passes the is_sql_valid function. This allows the execution of user-defined SQL beyond the expected boundaries, notably the trained schema.
Affected ProductsAI
See vendor advisory for affected versions.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
Share
External POC / Exploit Code
Leaving vuln.today