by Kastro
Paper/Archive/CVE-2025-1750

CVE-2025-1750

run-llama run-llama/llama_index — SQL Injection in run-llama/llama_index

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.0.590 × 2011.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

Affected

ProductAffectedFixed inSource
run-llama/llama_indexunspecified – < 0.3.10.3.1CNA

Scores by source

@huntr_ai (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.com/bounties/e1302233-9180-4269-9047-1526247d2cd8refgithub.com/run-llama/llama_index/commit/369a2942df2efcf6b74461c45d20a0af1fbe4ae2