CVE-2024-5565CWE-94

Prompt Injection in "ask" API with visualization leads to RCE

High · published May 31, 2024

CVSS v3.1
8.1
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with "visualize" set to True (default behavior) leads to remote code execution.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.15178 · 96.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-05-31T14:24Z
EPSS history
Timeline
  • 31 MAY 14:24Z
    Prompt Injection in "ask" API with visualization leads to RCE
    cvelistv5