CVE-2026-51911

CriticalCVSS 9.8

Published: 02/10/2026(UTC)Updated: 05/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

27th percentile - higher than 27% of all known CVEs

Summary

Vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.

Risk Assessment

The risk for the organization is the possibility of remote code execution by an attacker, which could lead to system compromise, data theft, or installation of malware.

Recommendation

It is recommended to immediately update Vanna to the latest version that fixes this vulnerability and restrict access to entry points that could be used for code injection.

Other vulnerabilities in Vanna

CVE-2026-65702High
Vanna through 2.0.2 has a path traversal vulnerability in FileSystemConversationStore. An unauthenticated attacker can write arbitrary JSON files and read conversation metadata outside the base directory using path traversal sequences in the conversation_id parameter.

Original NVD description (English source)

vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS