Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. Affected is the function exec of the file /src/vanna/legacy. Such manipulation leads to injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-21 | 2 | Disclosure1General1 |
| 2026-03-22 | 1 | Disclosure1 |
CVE-2026-4511 A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. Affected is the function exec of the file /src/vanna/legacy. Such manipulation leads to inject… https://www.cve.org/CVERecord?id=CVE-2026-4511
Post summary
A new injection vulnerability was identified in the exec function of vanna-ai vanna up to version 2.0.2, as reported in the CVE record.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4511 - vanna-ai vanna legacy exec injection Intel Report: https://ift.tt/Ln1gbKA
Post summary
The post alerts on CVE‑2026‑4511 as a legacy exec injection flaw in vanna‑ai and links to an intel report but offers no PoC, active exploitation evidence, or mitigation details.
CVE-2026-4511 Remote Code Injection in Vanna AI Up to Version 2.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4511
Post summary
The message announces the discovery of a remote code injection vulnerability (CVE‑2026‑4511) in Vanna AI versions up to 2.0.2, offering basic technical details but lacking PoC, exploit, or patch information.