Which versions of Python are affected by CVE-2026-4230?

Organizations using vanna-ai vanna should be aware of moderate risk from CVE-2026-4230, a SQL injection vulnerability rated CVSS 6.3.

Is there a public PoC exploit available for CVE-2026-4230?

Yes, a public proof-of-concept exploit is available for CVE-2026-4230. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4230?

Within 30 days: Identify affected systems running vanna-ai vanna and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Python CVE-2026-4230

Q: What is the CVSS score of CVE-2026-4230?

CVE-2026-4230 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-12375 LOW

SQL Injection (CWE-89)

2026-03-16 VulDB

Python SQLi Vanna Vanna Ai

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

CVSS changed

Apr 22, 2026 - 21:37 NVD

6.3 (MEDIUM) 5.3 (MEDIUM)

PoC Detected

Mar 16, 2026 - 14:53 vuln.today

Public exploit code

EUVD ID Assigned

Mar 16, 2026 - 09:00 euvd

EUVD-2026-12375

Analysis Generated

Mar 16, 2026 - 09:00 vuln.today

CVE Published

Mar 16, 2026 - 08:32 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability has been found in vanna-ai vanna up to 2.0.2. Affected is the function update_sql of the file src/vanna/legacy/flask/__init__.py of the component Endpoint. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

SQL injection in Vanna up to version 2.0.2 allows authenticated remote attackers to execute arbitrary SQL queries through the update_sql endpoint function. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early notification. An authenticated attacker can leverage this to read, modify, or delete database contents depending on the application's database permissions.

Technical ContextAI

The vulnerability resides in the legacy Flask application component (src/vanna/legacy/flask/__init__.py) of vanna-ai/vanna, a Python-based SQL generation and querying framework. The root cause is classified as CWE-89 (SQL Injection), where user-supplied input to the update_sql endpoint function is not properly sanitized or parameterized before being incorporated into SQL queries. The affected CPE is cpe:2.3:a:vanna-ai:vanna:*:*:*:*:*:*:*:*, indicating all versions up to 2.0.2 are vulnerable. The Flask web framework serves as the attack surface, with the endpoint directly exposing the injection vector to authenticated users over HTTP/HTTPS.

RemediationAI

Upgrade vanna-ai vanna to a version released after 2.0.2 that includes SQL injection remediation (vendor should be contacted directly for patched version availability given the lack of previous communication). If an immediate upgrade is not feasible, implement input validation and parameterized queries at the application level, restrict network access to the Flask endpoint to trusted IP ranges or VPN-only connections, enforce authentication token rotation, and disable the legacy Flask endpoint if not in active use. Monitor database query logs and application audit trails for suspicious SQL patterns. Contact vanna-ai directly through GitHub or their official support channel to obtain security patch information. References: https://gist.github.com/YLChen-007/48b86c2365e5ebf6923d5f14491b4329 (public POC), https://vuldb.com/?id.351153 (VulDB entry).