Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.7%	CVE-2024-8055vanna-ai/vanna · SQL Injection High7.5EPSS 0.7%2025-03-20CVE Database V5CVE-2024-8055 Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, such as `/etc/passwd`, by exploiting the exposed SQL queries through a Python Flask API. EPSS 0.7%Vulnerability CWE-89	CVE Database V5	2025-03-20

Page 1 of 1