by Kastro
Paper/Archive/CVE-2024-11958

CVE-2024-11958

run-llama run-llama/llama_index — SQL Injection in run-llama/llama_index

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
54
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.3.733 × 2014.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. This can lead to remote code execution (RCE) by installing the shellfs extension and executing malicious commands.

Affected

ProductAffectedFixed inSource
run-llama/llama_indexunspecified – < 0.4.00.4.0CNA

Scores by source

@huntr_ai (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.com/bounties/8ddf66e1-f74c-4d53-992b-76bc45cacac1refgithub.com/run-llama/llama_index/commit/35bd221e948e40458052d30c6ef2779bc965b6d0