GitHub Advisoryadvisory · PyPI

GHSA-x48g-hm9c-ww42 llama-index-packs-finchat SQL Injection vulnerability

CRITICAL Published 2025-03-20 Modified 2025-04-03 Official page ↗
Aliases
CVE-2024-12909
Ecosystem
PyPI
Packages
llama-index-packs-finchat
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2025-03-21

Affected packages

• PyPI llama-index-packs-finchat: <= 0.3.0 (no fix yet)

Description

A vulnerability in the FinanceChatLlamaPack of the llama-index-packs-finchat package, versions up to v0.3.0, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality. The issue is resolved by no longer officially supporting the package and moving it into the `stale_packages` branch on the repo, this removing it from documentation etc.

Related

Alias · CVE (1)

  • CVE-2024-12909 A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References