A security vulnerability has been detected in vanna-ai vanna up to version 2.0.2. The vulnerability affects an unknown function of the Legacy Flask API component and leads to improper authorization. The attack can be initiated remotely and the exploit has been publicly disclosed. The vendor was contacted about the disclosure but did not respond.