The vulnerability permits attackers to inject arbitrary SQL commands into the database when invoking certain PandasAI functions from the pandasai-lancedb Extension. This flaw can lead to unauthorized data retrieval, modification, or deletion, potentially compromising confidentiality, integrity, and availability of the underlying data store. The weakness is a classic SQL injection, as identified by CWE-74 and CWE-89.

Sinaptik AI's PandasAI library versions up to 0.1.4 are affected. The flaw resides in the functions delete_question_and_answers, delete_docs, update_question_answer, update_docs, get_relevant_question_answers_by_id, and get_relevant_docs_by_id within extensions/ee/vectorstores/lancedb/pandasai_lancedb/lancedb.py of the pandasai-lancedb Extension. Users running these components on any platform that connects to a database through the Extension are at risk.

The CVSS base score of 6.9 indicates a medium severity vulnerability. No EPSS score is available, but the advisory notes that the exploit is publicly available and can be launched remotely, making it a realistic threat. The vulnerability is not listed in the CISA KEV catalog, yet the presence of an open public exploit increases the likelihood of exploitation via the exposed web endpoints that call the vulnerable functions. Attackers could craft malicious payloads to manipulate SQL queries executed by the Extension.