Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is an unknown functionality of the file /api/vanna/v2/ of the component Chat API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-02 | 2 | Disclosure2 |
| 2026-04-27 | 1 | Patch1 |
🚨 HIGH: CVE-2026-5320 (CVSS 7.3) - Missing authentication in vanna-ai vanna ≤2.0.2 Chat API endpoint. Remotely exploitable, exploit public. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/w493Q25hi7
Post summary
CVE‑2026‑5320 enables remote exploitation via missing authentication in vanna‑ai vanna ≤2.0.2; patch immediately as the exploit is publicly available.
CVE-2026-5320 A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is an unknown functionality of the file /api/vanna/v2/ of the component Chat … https://www.cve.org/CVERecord?id=CVE-2026-5320
Post summary
A vulnerability identified as CVE-2026-5320 affects vanna‑ai vanna up to version 2.0.2, specifically an unknown functional flaw in the /api/vanna/v2/ component, with no further technical or mitigation details disclosed.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5320 - vanna-ai vanna Chat API Endpoint v2 missing authentication Intel Report: https://ift.tt/H7esufo
Post summary
The alert announces CVE-2026-5320, a missing authentication flaw in vanna-ai's Chat API Endpoint v2, and references an intel report link. No PoC, exploit, patch, or evidence of active exploitation is provided.