CVE-2025-1793 SQL Injection in run-llama/llama_index
Attackers can inject SQL via vector store integrations to read or modify data, impacting applications using the llama_index library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-1793?
CVE-2025-1793 is a critical SQL injection vulnerability in run-llama/llama_index, published on 5 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.
Weakness: CWE-89
Which versions are affected by CVE-2025-1793?
3 open source packages ship an affected version, including llama-index. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
llama-index PyPI | All versions | 0.12.28 |
llama-index PyPI | All versions | 0.12.28 |
llama-index PyPI | All versions | 0.12.28 |
Products include Llamaindex Llamaindex.
How do I fix CVE-2025-1793?
Upgrade llama-index to 0.12.28 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2025-1793 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-1793 exists.
Other vulnerabilities in run-llama/llama_index
Sources
Also known as GHSA-v3c8-3pr6-gr7p, PYSEC-2026-394.