Executive brief
vanna vulnerable to remote code execution caused by prompt injection
Affected products
- PyPI vanna
Junglewise Threat Intelligence
CVE-2024-5826: PYSEC-2026-562 - vanna vulnerable to remote code execution caused by prompt injection
CVE-2024-5826 · Severity: low · CVSS 3 · Published 2026-06-29
Technologies: vanna (PyPI). Vendors: PyPI.