CVE-2025-1793 — SQL Injection in run-llama/llama_index
Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data u…
Published: 2025-06-05 · CVSS: 9.8 · CVSS 3.0
Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7