Vulnerability · Published Jun 5, 2025 · Assigned by @huntr_ai

CVE-2025-1793SQL Injection in run-llama/llama_index

Critical 9.8

In plain English

A critical-severity SQL injection in run-llama/llama_index from run-llama. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.0)9.8Critical

Exploit odds (30 days)0.7%top 46.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	llama-index	0.12.28	GHSA-v3c8-3pr6-gr7p
PyPI	llama-index	0.12.28	PYSEC-2026-394

Affected products (as reported)

Vendor	Product	Versions
run-llama	run-llama/llama_index	unspecified – before 0.12.28

Weakness: CWE-89 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References