PT-2025-12156 · Postgresql+1 · Postgresql+1

Published 2025-03-20 · Updated 2025-07-30 · CVE-2024-12909

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions llama-index-packs-finchat versions up to v0.3.0 run-llama/llama index versions up to v0.12.3

Description A vulnerability exists in the FinanceChatLlamaPack component, allowing for SQL injection in the run sql query function within the database agent. An attacker can exploit this issue to inject arbitrary SQL queries, potentially leading to remote code execution (RCE) by leveraging PostgreSQL's large object functionality.

Recommendations llama-index-packs-finchat versions up to v0.3.0: The package is no longer officially supported and has been moved to the stale packages branch, effectively removing it from documentation. run-llama/llama index versions up to v0.12.3: Update to version 0.3.0 or later to resolve the issue.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-12909

GHSA-X48G-HM9C-WW42

Affected Products

Postgresql

Run-Llama/Llama Index

References · 10

• 🔥 https://huntr.com/bounties/44e8177f-200a-4ba3-a12c-8bc21e313a3f · Exploit
• https://github.com/run-llama/llama_index/commit/5d03c175476452db9b8abcdb7d5767dd7b310a75 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-12909 · Security Note
• https://osv.dev/vulnerability/GHSA-x48g-hm9c-ww42 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-12909 · Vendor Advisory
• https://github.com/run-llama/llama_index · Note
• https://github.com/run-llama/llama_index/tree/stale_packages/llama-index-packs/llama-index-packs-finchat · Note
• https://t.me/cveNotify/130216 · Telegram Post
• https://twitter.com/CVEnew/status/1902968912008090080 · Twitter Post
• https://twitter.com/CveFindCom/status/1902671736916807795 · Twitter Post