LlamaIndexGHSA-2jxw-4hm4-6w87
SQL injection in llama-index
Critical9.8CVE-2024-23751 · Published Jan 22, 2024 · updated Feb 16, 2024
LlamaIndex (aka llama_index) through 0.9.35 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Drop the Students table" within English language input.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | <= 0.9.35 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-89
- Also known as
- CVE-2024-23751, PYSEC-2024-12
More LlamaIndex advisories
All LlamaIndex| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 202025 | LlamaIndex Improper Handling of Exceptional Conditions vulnerability High7.5Mar 20, 2025 | High7.5 | 0.12.6 |
| Aug 222024 | LlamaIndex includes an exec call for `import {cls_name}`Critical9.8Aug 22, 2024 | Critical9.8 | 0.10.38 |
| May 162024 | RunGptLLM class in LlamaIndex has a command injectionHigh8.8May 16, 2024 | High8.8 | 0.10.13 |
| Apr 162024 | llama-index-core Command Injection vulnerabilityCritical9.8Apr 16, 2024 | Critical9.8 | 0.10.24 |
| Apr 102024 | llama-index-core Prompt Injection vulnerability leading to Arbitrary Code ExecutionCritical9.8Apr 10, 2024 | Critical9.8 | 0.10.24 |
| Aug 152023 | llama-index vulnerable to arbitrary code executionCritical9.8Aug 15, 2023 | Critical9.8 | 0.9.14 |