PT-2026-2317 · Unknown · Llama Index

Lifeteam2024 · Published 2026-01-12 · Updated 2026-01-12 · CVE-2024-14021

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LlamaIndex versions up to and including 0.11.6

Description LlamaIndex contains an unsafe deserialization issue in the BGEM3Index.load from disk() function located in llama index/indices/managed/bge m3/base.py. The function utilizes pickle.load() to deserialize the multi embed store.pkl file from a user-supplied persist dir without proper validation. This allows an attacker who can control the contents of the persist dir and provide a malicious pickle file to potentially execute arbitrary code when the index is loaded from disk. The vulnerable function is BGEM3Index.load from disk().

Recommendations Update LlamaIndex to a version newer than 0.11.6.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-14021

PYSEC-2026-85

Affected Products

Llama Index

References · 8

• 🔥 https://huntr.com/bounties/ab4ceeb4-aa85-4d1c-aaca-4eda1b71fc12 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-14021 · Security Note
• https://osv.dev/vulnerability/CVE-2024-14021 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-85 · Vendor Advisory
• https://github.com/run-llama/llama_index · Note
• https://twitter.com/CVEnew/status/2010859145982066861 · Twitter Post
• https://vulncheck.com/advisories/llamaindex-bgem3index-unsafe-deserialization · Note
• https://llamaindex.ai · Note