CVE-2024-12366

published 2025-02-11 20 mo ago modified 2026-09-10 1 mo ago also GHSA-vv2h-2w3q-3fx7 , PYSEC-2026-448 , EUVD-2024-50809

cvss: 9.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.2%; EPSS 1.2% chance of exploitation in 30 days, percentile 68%
public exploits: 0; none known

PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM.

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: total
Assessed: 20 mo ago (2025-02-11)

Exploit prediction

1.21% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
OSV	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	pandasai	<=2.4.2	no fix listed

Affected products

Sinaptik AI PandasAI

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

docs.pandas-ai.com /advanced-security-agent
web
docs.getpanda.ai /v3/privacy-security
web
kb.cert.org /vuls/id/148244
web
nvd.nist.gov /vuln/detail/CVE-2024-12366
advisory
github.com /sinaptik-ai/pandas-ai
package
pypi.org /project/pandasai
package
github.com /advisories/GHSA-vv2h-2w3q-3fx7
advisory

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary