CVE-2026-6977 Details

A critical vulnerability has been identified in Vanna AI's Vanna application, specifically in versions through 2.0.2. The issue arises from the Legacy Flask API, which defaults to an authentication method that allows all requests without credentials. This flaw exposes over 20 API endpoints, including those for SQL execution, SQL injection, training data management, and function management, to unauthorized remote access. The vulnerability exists because the API's authentication backend, NoAuth(), fails to properly validate user credentials, leaving sensitive functionalities open to exploitation.

It is recommended to change the default authentication setting in the VannaFlaskApp to require explicit authentication. If this is not possible, a warning should be logged to alert users that the application is running with no authentication, which is unsafe for production.