---
id: CVE-2024-5753
aliases:
  - GHSA-mwxm-35f8-6vg2
  - PYSEC-2026-2002
title: Vanna vulnerable to SQL Injection
summary: Vanna vulnerable to SQL Injection
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
vendor: vanna
product: vanna
ecosystem: pip
affected:
  - vanna <= 0.3.4
published: '2024-07-05'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-mwxm-35f8-6vg2'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-5753'
  - url: 'https://github.com/vanna-ai/vanna'
  - url: 'https://huntr.com/bounties/a3f913d6-c717-4528-b974-26d8d9e839ca'
tags:
  - osv
  - pip
epss: 0.00604
epssPercentile: 0.47601
ingestedAt: '2026-07-08T18:25:51.464Z'
---

## Overview

vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/etc/passwd`, by exploiting the exposed SQL queries via a Python Flask API.

## Affected packages

- `vanna <= 0.3.4`

## Remediation

Refer to the advisory for the patched release.