Description
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| run-llama | run-llama/llama_index | unspecified – < 0.3.1 | 0.3.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | llama-index | >= 0.12.19, < 0.12.21 | 0.12.21 | PYSEC-2025-245 |
| PyPI | llama-index-vector-stores-duckdb | >= 0.12.19, < 0.12.21 | 0.12.21 | GHSA-6mcc-q3mg-3qg6 |