CVE-2023-39660 pandasai vulnerable to prompt injection
Remote attackers can execute arbitrary code via crafted requests to the prompt function in the pandasai library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-39660?
CVE-2023-39660 is a critical code injection vulnerability in n/a, published on 21 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
Weakness: CWE-94
Which versions are affected by CVE-2023-39660?
3 open source packages ship an affected version, including pandasai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pandasai PyPI | All versions | 0.8.1 |
pandasai PyPI | All versions | 0.8.1 |
pandasai PyPI | All versions | 0.8.1 |
Products include Gabrieleventuri Pandasai.
How do I fix CVE-2023-39660?
Upgrade pandasai to 0.8.1 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-39660 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-39660 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w832-v3c6-m6rg, PYSEC-2026-1757.