GitHub Advisoryadvisory · PyPI

GHSA-vv2h-2w3q-3fx7 PandasAI interactive prompt function Remote Code Execution (RCE)

CRITICAL Published 2025-02-11 Modified 2025-02-11 Official page ↗
Aliases
CVE-2024-12366
Ecosystem
PyPI
Packages
pandasai
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2025-02-11

Affected packages

• PyPI pandasai: <= 2.4.2 (no fix yet)

Description

PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM. The security controls of PandasAI (2.4.3 and earlier) fail to distinguish between legitimate and malicious inputs, allowing the attackers to manipulate the system into executing untrusted code, leading to untrusted code execution (RCE), system compromise, or pivoting attacks on connected services.

Related

Alias · CVE (1)

  • CVE-2024-12366 PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References