SQL Injection Vulnerability in Sinaptik AI PandasAI lancedb Extension

A SQL injection vulnerability has been identified in Sinaptik AI PandasAI versions up to 0.1.4. This vulnerability resides within the pandasai-lancedb Extension, specifically affecting the delete_question_and_answers, delete_docs, update_question_answer, update_docs, get_relevant_question_answers_by_id, and get_relevant_docs_by_id functions within the lancedb.py file. The vulnerability allows for remote exploitation, potentially enabling attackers to execute arbitrary SQL queries against the underlying database. A public exploit is available, increasing the risk of widespread exploitation. The vendor was contacted regarding this vulnerability but did not respond.

Attack Chain

1. An attacker identifies a PandasAI application using a vulnerable version (<= 0.1.4) with the lancedb extension enabled.
2. The attacker crafts a malicious HTTP request targeting one of the vulnerable functions: delete_question_and_answers, delete_docs, update_question_answer, update_docs, get_relevant_question_answers_by_id, or get_relevant_docs_by_id.
3. The malicious request injects SQL code into parameters intended for legitimate database queries.
4. The PandasAI application’s lancedb extension processes the request without proper sanitization or parameterization.
5. The injected SQL code is executed by the underlying database, modifying, deleting, or extracting sensitive data.
6. The attacker leverages the SQL injection to potentially escalate privileges within the database server.
7. The attacker can then use the escalated privileges to access other parts of the application or the underlying system.
8. The attacker exfiltrates sensitive data or compromises the integrity of the application and its data.

Impact

Successful exploitation of this SQL injection vulnerability can lead to unauthorized access to sensitive data, data modification, or even complete database compromise. Depending on the application’s function, this could result in exposure of personal information, financial data, or intellectual property. The availability of a public exploit increases the likelihood of widespread attacks. Without remediation, any application using a vulnerable version of PandasAI with the lancedb extension is at risk.

Recommendation

• Upgrade PandasAI to a version greater than 0.1.4 to patch the SQL injection vulnerability (CVE-2026-4996).
• Implement input validation and sanitization measures on all user-supplied data to prevent SQL injection attacks targeting webserver logs.
• Deploy the Sigma rule Detect Potential PandasAI SQL Injection Attempts to your SIEM to detect exploitation attempts.