CVE-2024-7764

Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the `generate_sql` function calls `extract_sql` with the LLM response. An attacker can include a semi-colon between a search data field and their own command, causing the `extract_sql` function to remove all LLM generated SQL and execute the attacker's command if it passes the `is_sql_valid` function. This allows the execution of user-defined SQL beyond the expected boundaries, notably the trained schema.

• CWE-89

• https://huntr.com/bounties/85d403b1-fbed-42e9-9ec1-2f79abf6eb0f

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7758The Stylish Price List WordPress plugin before 7.1.8 does n…4.8
• CVE-2024-7759The PWA for WP WordPress plugin before 1.7.72 does not sani…4.8
• CVE-2024-7760aimhubio/aim version 3.22.0 contains a Cross-Site Request Fo…9.6
• CVE-2024-7761In the process of testing the Simple Job Board WordPress plu…6.1
• CVE-2024-7762The Simple Job Board WordPress plugin before 2.12.6 does not…3.7
• CVE-2024-7763In WhatsUp Gold versions released before 2024.0.0,  an Auth…7.5
• CVE-2024-7765In h2oai/h2o-3 version 3.46.0.2, a vulnerability exists wher…7.5
• CVE-2024-7766The Adicon Server WordPress plugin through 1.2 does not sani…7.2
• CVE-2024-7767An improper access control vulnerability exists in danswer-a…8.1
• CVE-2024-7768A vulnerability in the `/3/ImportFiles` endpoint of h2oai/h2…7.5
• CVE-2024-7769The ClickSold IDX WordPress plugin through 1.90 does not san…4.8
• CVE-2024-7770The Bit File Manager – 100% Free & Open Source File Manager …8.8