pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.

Description

Vendor	Product	Versions
Sinaptik AI	pandas-ai	—

Tier C

VulDB5h ago

→ No new info (linked only)

CVSS 3.17.3 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA KEV❌ No

Actively exploited❌ No

CWECWE-89

PublishedApr 1, 2026

Last enriched1h agov2

Trending Score27

Source articles1

Independent1

Info Completeness7/14

Missing: versions, epss, kev, exploit, patch, iocs, mitre_attack

0 upvotes0 downvotes

Last enriched 1h ago

v2Tier C1h ago

Updated vendor to Sinaptik AI, product to pandas-ai, severity to CRITICAL, and marked as actively exploited.

vendorproduct

via VulDB

v13h ago

Initial creation