p PatchFirst

PatchFirst · Latest vulnerabilities

llama-index-vector-stores-duckdb vulnerabilities

Vulnerabilities published for llama-index-vector-stores-duckdb in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-1750

    Critical · CVSS 9.8EPSS 0.88%Fix available

    SQL Injection in run-llama/llama_index

    An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

    llama-index-vector-stores-duckdbPython
    • Update to 0.12.21
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →