CVE-2026-4231 - vanna-ai vanna Endpoint __init__.py run_sql server-side request forgery

Back Back to CVE browser

MEDIUM

vanna-ai vanna Endpoint init.py run_sql server-side request forgery

Published Mar 16, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.47%

Description

A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function update_sql/run_sql of the file src/vanna/legacy/flask/__init__.py of the component Endpoint. Performing a manipulation results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Vanna-AI Product Vanna Default
n/a
- Version
  2.0.0
  Status
  affected
  Constraints
  -
- Version
  2.0.1
  Status
  affected
  Constraints
  -
- Version
  2.0.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Vanna-AI

Vanna

n/a

Version	Status	Constraints
2.0.0	affected	-
2.0.1	affected	-
2.0.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12376
Advisory
https://gist.github.com/YLChen-007/574542015755951ee1d53206022cc754
exploit
https://vuldb.com/?ctiid.351154
signaturepermissions-required
https://vuldb.com/?id.351154
vdb-entrytechnical-description
https://vuldb.com/?submit.771217
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12376		Advisory
https://gist.github.com/YLChen-007/574542015755951ee1d53206022cc754		exploit
https://vuldb.com/?ctiid.351154		signaturepermissions-required
https://vuldb.com/?id.351154		vdb-entrytechnical-description
https://vuldb.com/?submit.771217		third-party-advisory