Vulnerability · Published Jun 2, 2025 · Assigned by @huntr_ai
CVE-2025-1750SQL Injection in run-llama/llama_index
Critical 9.8
In plain English
A critical-severity SQL injection in run-llama/llama_index from run-llama. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | llama-index | 0.12.21 | PYSEC-2025-245 |
| PyPI | llama-index-vector-stores-duckdb | 0.12.21 | GHSA-6mcc-q3mg-3qg6 |
| PyPI | llama-index-vector-stores-duckdb | 0.12.21 | PYSEC-2026-4242 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| run-llama | run-llama/llama_index | unspecified – before 0.3.1 |
Weakness: CWE-89 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H