CVE-2024-12909: SQL Injection to RCE in run-llama/llama_index
First published: Thu Mar 20 2025(Updated: )
A vulnerability in the FinanceChatLlamaPack of the llama-index-packs-finchat package, versions up to v0.3.0, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality. The issue is resolved by no longer officially supporting the package and moving it into the `stale_packages` branch on the repo, this removing it from documentation etc.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FinanceChatLlamaPack | <v0.12.3 | |
| pip/llama-index-packs-finchat | <=0.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/run-llama/llama_index/commit/5d03c175476452db9b8abcdb7d5767dd7b310a75
- https://huntr.com/bounties/44e8177f-200a-4ba3-a12c-8bc21e313a3f
- https://nvd.nist.gov/vuln/detail/CVE-2024-12909
- https://github.com/advisories/GHSA-x48g-hm9c-ww42 (Advisory)
- https://github.com/run-llama/llama_index/tree/stale_packages/llama-index-packs/llama-index-packs-finchat
Frequently Asked Questions
What is the severity of CVE-2024-12909?
CVE-2024-12909 is classified as a high severity vulnerability due to its potential for SQL injection exploits.
How do I fix CVE-2024-12909?
To fix CVE-2024-12909, upgrade the FinanceChatLlamaPack or llama-index package to version 0.12.4 or later.
Which software is affected by CVE-2024-12909?
CVE-2024-12909 affects versions of the FinanceChatLlamaPack and the llama-index package up to v0.12.3.
What is the potential impact of CVE-2024-12909?
The potential impact of CVE-2024-12909 includes unauthorized access to the database through SQL injection.
In which function is CVE-2024-12909 present?
CVE-2024-12909 is present in the `run_sql_query` function of the `database_agent`.
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- collector/nvd-cve
- agent/source
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-x48g-hm9c-ww42
- alias/CVE-2024-12909
- agent/last-modified-date
- agent/references
- agent/softwarecombine
- agent/description
- agent/tags
- collector/github-advisory
- vendor/run-llama
- canonical/financechatllamapack
- package-manager/pip