Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Cybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques.
The vulnerability, tracked as CVE-2024-5565 (CVSS score: 8.1), relates to a case of prompt injection in the "ask" function that could be exploited to trick the library into executing arbitrary

ask attacks case code code execution cve cve-2024 cvss cvss score cybersecurity databases exploited flaw function high injection injection flaw library prompt prompt injection rce rce attacks remote code remote code execution researchers score security security flaw severity techniques vulnerability