GHSA-6mj8-jmp2-g8q7

Vanna has a SQL injection in the remove_training_data function

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-4229

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	vanna	<= 2.0.2	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove_training_data of the file src/vanna/legacy/google/bigquery_vector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-4229 advisory
https://gist.github.com/YLChen-007/b4f326eaecc29b192cf93dc5d6bc0623 web
https://github.com/vanna-ai/vanna package
https://vuldb.com/?ctiid.351152 web
https://vuldb.com/?id.351152 web
https://vuldb.com/?submit.771214 web