GitHub Advisoryadvisory · PyPI

GHSA-wvpx-g427-q9wc llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

CRITICAL Published 2024-04-10 Modified 2026-10-27 Official page ↗
Aliases
CVE-2024-3098
Ecosystem
PyPI
Packages
llama-index-core
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2024-04-10

Affected packages

• PyPI llama-index-core: < 0.10.24 → fixed in 0.10.24

Description

A vulnerability was identified in the `exec_utils` class of the `llama_index` package, specifically within the `safe_eval` function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method restrictions and execute unauthorized code. The vulnerability is a bypass of the previously addressed CVE-2023-39662, demonstrated through a proof of concept that creates a file on the system by exploiting the flaw.

Related

Alias · CVE (1)

  • CVE-2024-3098 A vulnerability was identified in the `exec_utils` class of the `llama_index` package, specifically within the `safe_eval` function,… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References