CVE-2026-6977
Published: 25 April 2026
Summary
CVE-2026-6977 is a medium-severity Incorrect Privilege Assignment (CWE-266) vulnerability. Its CVSS base score is 5.5 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 17.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as NLP and Transformers; in the Supply Chain and Deployment risk domain.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and AC-6 (Least Privilege).
Deeper analysis
CVE-2026-6977 is an improper authorization vulnerability in vanna-ai vanna versions up to 2.0.2. The issue resides in an unknown function within the Legacy Flask API component. Manipulation of this function enables unauthorized access, as classified under CWE-266 (Incorrect Privilege Assignment) and CWE-285 (Improper Authorization).
The vulnerability allows remote exploitation by unauthenticated attackers (PR:N) with low attack complexity (AC:L) and no user interaction required (UI:N), across the network (AV:N) with unchanged scope (S:U). Successful exploitation can lead to low impacts on confidentiality, integrity, and availability (C:L/I:L/A:L), earning a CVSS v3.1 base score of 7.3 (High).
Advisories from referenced sources, including VulDB entries and a GitHub issue, indicate that the exploit has been publicly disclosed and may be actively used. The vendor was contacted early regarding the issue but has not responded or provided patches or mitigations.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-25653
Vulnerability details
A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. The affected element is an unknown function of the component Legacy Flask API. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The…
more
exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
AI Security AnalysisAI
- AI Category
- NLP and Transformers
- Risk Domain
- Supply Chain and Deployment
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: ai
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability is an improper authorization flaw (CWE-285/266) in a public-facing Legacy Flask API, directly enabling remote unauthenticated exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces approved authorizations for access to system resources, preventing exploitation of the improper authorization flaw in the Legacy Flask API.
Implements least privilege to counter incorrect privilege assignment (CWE-266) in the vulnerable vanna-ai function, limiting unauthorized access.
Requires timely identification, reporting, and correction of the known improper authorization vulnerability in vanna-ai up to version 2.0.2.