A data-analysis AI agent read a natural-language prompt, generated Python code, and executed it to interact with the data, exactly as designed. That convenience was exploited as the flaw’s entry point. In 2025, research documented CVE-2024-12366, a prompt-injection vulnerability inPandasAI that allowed attacker-supplied text to run arbitrary code, granting remote…