GitHub Advisoryadvisory · PyPI

GHSA-339r-cjv9-x78g LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

CRITICAL Published 2025-03-20 Modified 2026-07-21 Official page ↗
Aliases
CVE-2024-11958
Ecosystem
PyPI
Packages
llama-index-retrievers-duckdb-retriever
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2025-05-28

Affected packages

• PyPI llama-index-retrievers-duckdb-retriever: < 0.4.0 → fixed in 0.4.0

Description

A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in llama-index-retrievers-duckdb-retriever prior to v0.4.0. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. This can lead to remote code execution (RCE) by installing the shellfs extension and executing malicious commands.

Related

Alias · CVE (1)

  • CVE-2024-11958 A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References