Advisoriesby IbisLlamaIndexPYSEC-2025-245
LlamaIndex: SQL injection
Fix: upgrade to 0.12.21 or later
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | >= 0.12.19, < 0.12.21 | 0.12.21 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the CVSS score
- Also known as
- CVE-2025-1750, GHSA-6mcc-q3mg-3qg6, PYSEC-2026-4242
More LlamaIndex advisories
All LlamaIndex
LlamaIndex: arbitrary file readCVE-2025-3046fixed in 0.12.28A vulnerability in the ArxivReader class of the run-llama/llama_index repositoryCVE-2025-3044fixed in 0.12.28LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108fixed in 0.12.41llama_index vulnerable to SQL InjectionCVE-2025-1793fixed in 0.12.28LlamaIndex: command injectionCVE-2025-1753no fix yetLlamaIndex Vulnerable to Denial of Service (DoS)CVE-2025-1752fixed in 0.12.21