PT-2024-29576 · Unknown · Llama Index

Published 2024-05-16 · Updated 2025-10-21 · CVE-2024-4181

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions llama index library version 0.9.47

Description A command injection issue exists due to the improper use of the eval function in the RunGptLLM class, allowing a malicious LLM hosting provider to execute arbitrary commands on the client's machine. This could lead to a hosting provider gaining full control over client machines.

Recommendations For version 0.9.47, update to version 0.10.13 to resolve the issue. As a temporary workaround, consider restricting access to the eval function in the RunGptLLM class until the update is applied.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-4181

GHSA-PW38-XV9X-H8CH

Affected Products

Llama Index

References · 7

• 🔥 https://huntr.com/bounties/1a204520-598a-434e-b13d-0d34f2a5ddc1 · Exploit
• https://github.com/run-llama/llama_index/commit/d73715eaf0642705583e7897c78b9c8dd2d3a7ba · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-4181 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4181 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pw38-xv9x-h8ch · Vendor Advisory
• https://github.com/run-llama/llama_index · Note
• https://t.me/cveNotify/139569 · Telegram Post