CVE-2026-51911 | vanna-ai vanna 2.0.2 base.py VannaBase.get_plotly_figure code injection

A vulnerability, which was classified as critical, was found in vanna-ai vanna 2.0.2. The impacted element is the function VannaBase.get_plotly_figure of the file src/vanna/legacy/base/base.py. Such manipulation leads to code injection.

This vulnerability is documented as CVE-2026-51911. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More