CVE-2026-5321 Details
Description
A flaw has been found in vanna-ai vanna up to 2.0.2. Affected by this issue is some unknown functionality of the component FastAPI/Flask Server. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A CORS misconfiguration vulnerability has been identified in Vanna AI's Vanna product, affecting versions through 2.0.2. The issue arises from the FastAPI and Flask server implementations, where the server reflects any 'Origin' request header value into the 'Access-Control-Allow-Origin' response header, while also setting 'Access-Control-Allow-Credentials' to true. This misconfiguration allows an attacker-controlled website to make authenticated cross-origin requests to the Vanna API on behalf of a victim user, potentially leading to unauthorized access to sensitive data.
It is recommended to replace the permissive CORS defaults with an explicit origin whitelist, disallowing credentials by default. Alternatively, the application can be configured to allow specific origins while ensuring 'allow_credentials' is not set to true.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 2, 2026CISA-ADP
Assessed Apr 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/August829/CVEP/issues/14 | [email protected] | ExploitIssue TrackingTechnical Description |
| https://vuldb.com/submit/780729 | [email protected] | Technical Description |
| https://vuldb.com/vuln/354653 | [email protected] | AdvisoryExploitPartial Content |
| https://vuldb.com/vuln/354653/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
| CWE-942 | Permissive Cross-domain Policy with Untrusted Domains | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vanna-ai vanna | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 2, 2026 | New CVE Received | [email protected] |