AI agent vulnerability · LlamaIndex

CVE-2024-3098: llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

criticalCVSS 3.0 9.8GHSA-wvpx-g427-q9wc

A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method restrictions and execute unauthorized code.

Published Apr 10, 2024

Affected packages

llama-index-core

Ecosystem: PyPI
Affected: < 0.10.24
Fixed in: 0.10.24
Check: pip show llama-index-core

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability was identified in the exec_utils class of the llama_index package, specifically within the safe_eval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method restrictions and execute unauthorized code. The vulnerability is a bypass of the previously addressed CVE-2023-39662, demonstrated through a proof of concept that creates a file on the system by exploiting the flaw.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More LlamaIndex vulnerabilities

All LlamaIndex entries