Advisoriesby IbisLlamaIndexGHSA-v3c8-3pr6-gr7p
llama_index vulnerable to SQL Injection
Fix: upgrade to 0.12.28 or later
Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | < 0.12.28 | 0.12.28 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-89
- Also known as
- CVE-2025-1793, PYSEC-2026-394
- nvd.nist.gov/vuln/detail/CVE-2025-1793
- github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- github.com/advisories/GHSA-v3c8-3pr6-gr7p
- github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2026-394.yaml
- github.com/run-llama/llama_index
- huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c
- pypi.org/project/llama-index
More LlamaIndex advisories
All LlamaIndex
LlamaIndex: arbitrary file readCVE-2025-3046fixed in 0.12.28A vulnerability in the ArxivReader class of the run-llama/llama_index repositoryCVE-2025-3044fixed in 0.12.28LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108fixed in 0.12.41LlamaIndex: SQL injectionCVE-2025-1750fixed in 0.12.21LlamaIndex: command injectionCVE-2025-1753no fix yetLlamaIndex Vulnerable to Denial of Service (DoS)CVE-2025-1752fixed in 0.12.21