CVE-2024-12909: llama-index-packs-finchat SQL Injection vulnerability
A vulnerability in the FinanceChatLlamaPack of the llama-index-packs-finchat package, versions up to v0.3.0, allows for SQL injection in the runsqlquery function of the databaseagent. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality.
Published Mar 20, 2025 · Updated Apr 3, 2025
Affected packages
llama-index-packs-finchat
- Ecosystem
- PyPI
- Affected
- <= 0.3.0
- Fixed in
- No patched version yet
- Check
pip show llama-index-packs-finchat
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
A vulnerability in the FinanceChatLlamaPack of the llama-index-packs-finchat package, versions up to v0.3.0, allows for SQL injection in the run_sql_query function of the database_agent. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality.
The issue is resolved by no longer officially supporting the package and moving it into the stale_packages branch on the repo, this removing it from documentation etc.
Credited to logan-markewich.
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-12909
- https://github.com/run-llama/llama_index/commit/5d03c175476452db9b8abcdb7d5767dd7b310a75
- https://huntr.com/bounties/44e8177f-200a-4ba3-a12c-8bc21e313a3f
- https://github.com/run-llama/llama_index/tree/stale_packages/llama-index-packs/llama-index-packs-finchat
- https://github.com/advisories/GHSA-x48g-hm9c-ww42
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology