by Kastro
Paper/Archive/CVE-2024-5827

CVE-2024-5827

vanna-ai vanna-ai/vanna — Arbitrary File Write by Prompt Injection via DuckDB SQL in vanna-ai/vanna

EPSS 3%public exploitCVSS 9.8
critical.is priorityof 100
57
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.9.889 × 2017.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents `<?php system($_GET[0]); ?>`. This can lead to command execution or the creation of backdoors.

Affected

ProductAffectedFixed inSource
vanna-ai/vannaunspecified – latest–CNA
vanna0.3.4–CISA-ADP

Scores by source

@huntr_ai (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.com/bounties/e4e64a51-618b-41d0-8f56-1d2146d8825e