Which versions of Pandasai are affected by CVE-2026-4997?

Organizations using Sinaptik AI PandasAI should be aware of moderate risk from CVE-2026-4997, a path traversal vulnerability rated CVSS 5.5. This could allow unauthorized file access.

Is there a public PoC exploit available for CVE-2026-4997?

Yes, a public proof-of-concept exploit is available for CVE-2026-4997. Prioritise patching immediately. EPSS: 0.1%.

Pandasai CVE-2026-4997

Q: What is the CVSS score of CVE-2026-4997?

CVE-2026-4997 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-16924 MEDIUM

Path Traversal (CWE-22)

2026-03-28 VulDB

Path Traversal Pandasai

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Mar 30, 2026 - 13:26 vuln.today

Public exploit code

EUVD ID Assigned

Mar 28, 2026 - 12:45 euvd

EUVD-2026-16924

Analysis Generated

Mar 28, 2026 - 12:45 vuln.today

CVE Published

Mar 28, 2026 - 12:23 nvd

MEDIUM 5.5

DescriptionCVE.org

A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of the file pandasai/helpers/sql_sanitizer.py. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Path traversal in Sinaptik AI PandasAI up to version 3.0.0 allows remote unauthenticated attackers to read arbitrary files by manipulating the is_sql_query_safe function in the SQL sanitizer module. The vulnerability has a CVSS score of 5.3 (low-to-medium severity) with public exploit code available, though active exploitation has not been confirmed by CISA. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P indicates remote network-based attack with low complexity and no privileges required, placing this vulnerability at medium accessibility. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An unauthenticated remote attacker sends a crafted SQL query or input string containing path traversal sequences (e.g., ../../etc/passwd) to a web application or API endpoint that uses PandasAI's is_sql_query_safe function for validation. Due to insufficient input sanitization, the path traversal payload bypasses the safety check and allows the attacker to read sensitive configuration files, environment variables, or other files outside the intended data directory. …
Remediation	Upgrade Sinaptik AI PandasAI to a version released after 3.0.0 that includes fixes for the path traversal vulnerability in the is_sql_query_safe function. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 30 days: Identify affected systems running Sinaptik AI PandasAI and apply vendor patches as part of regular patch cycle. …

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-4997 vulnerability details – vuln.today

Back