CVE-2023-39660

CriticalCVSS 9.8

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

Version 0.8.0 and earlier of the pandasai library by Gaberiele Venturi contains a vulnerability that allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

Risk Assessment

This vulnerability poses a serious security risk as it allows for remote code execution, potentially leading to system compromise.

Recommendation

It is recommended to update the pandasai library to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.