CVE-2024-12909

A flaw was found in the run-llama/llamaindex. This vulnerability allows an attacker to inject arbitrary SQL queries via the runsqlquery function in the databaseagent, leading to remote code execution RCE through PostgreSQL's large object functionality...

CVE-2024-12909

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:31+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhhpay72m...

CVE-2024-12909

A vulnerability in the FinanceChatLlamaPack of the run-llama/llamaindex repository, versions up to v0.12.3, allows for SQL injection in the runsqlquery function of the databaseagent. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code executi...

CVE-2024-12909

CVE-2024-12909 affects the FinanceChatLlamaPack within the run-llama/llama_index project (up to v0.12.3). The root cause is an SQL injection in the database_agent’s run_sql_query function, which can be exploited to inject arbitrary SQL and trigger remote code execution through PostgreSQL large ob...

CVE-2024-12909 SQL Injection to RCE in run-llama/llama_index

A vulnerability in the FinanceChatLlamaPack of the run-llama/llamaindex repository, versions up to v0.12.3, allows for SQL injection in the runsqlquery function of the databaseagent. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code executi...

CVE-2024-12909 SQL Injection to RCE in run-llama/llama_index

A vulnerability in the FinanceChatLlamaPack of the run-llama/llamaindex repository, versions up to v0.12.3, allows for SQL injection in the runsqlquery function of the databaseagent. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code executi...