This vulnerability affects vanna-ai vanna versions 2.0.0 through 2.0.2 and involves a permissive cross-domain policy configuration in the FastAPI/Flask server component. The flaw allows remote attackers to manipulate the cross-domain policy to include untrusted domains, potentially enabling unauthorized cross-origin requests. The vulnerability requires no user interaction and can be exploited remotely with low attack complexity and low privileges. The CVSS 4.0 base score is 5.3, reflecting medium severity. The vendor was contacted but did not provide a response or patch, and no official remediation is currently documented.

The vulnerability allows remote attackers to exploit overly permissive cross-domain policies, potentially enabling unauthorized cross-origin interactions with the affected server. This could lead to security issues such as data exposure or unauthorized actions performed via cross-domain requests. However, the impact is limited by the medium CVSS score and the requirement for low privileges but no user interaction. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch is available, users should monitor for updates from the vendor. As a temporary measure, reviewing and tightening cross-domain policy configurations manually, if possible, may reduce exposure. Avoid deploying affected versions in sensitive environments until a fix is released.