CYBERHAWK / CVE / CVE-2026-6977

CVE-2026-6977

vanna-ai

HIGH CVSS 7.3 ai

The flaw

Improper authorization in Legacy Flask API allows remote attacks.

What to do

Update to version 2.0.3 or later

▸ Scan my repo for CVE-2026-6977

References

First seen 2026-05-01 · Tracked by PickBits CyberHawk · Weekly CVE digest