CVE-2024-12366

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

PandasAI contains a vulnerability in its interactive prompt function that permits prompt injection attacks. Rather than generating an intended natural language explanation via the underlying LLM, an attacker-supplied prompt can cause the library to execute arbitrary Python code, resulting in remote code execution on the host system. The affected component is the core prompt-handling logic in PandasAI, which processes untrusted natural-language input without sufficient isolation or sandboxing.

An unauthenticated attacker with network access can supply a malicious prompt that bypasses the intended LLM workflow and directly executes Python statements. Successful exploitation grants full confidentiality, integrity, and availability impact, consistent with the CVSS 9.8 rating that reflects no required authentication or user interaction.

Public references point to PandasAI security documentation covering privacy controls and an advanced security agent feature, along with a CERT vulnerability note, but do not detail specific patches or configuration changes that close the injection path.

The associated EPSS score remains flat at 0.0781 with no observed increase after disclosure. The issue is specific to an LLM-integrated data-analysis library and therefore affects organizations using PandasAI for natural-language querying of data sets.