PT-2026-2318 · Vannapack+1 · Vannapack+2

Lifeteam2024 · Published 2026-01-12 · Updated 2026-01-21 · CVE-2024-58339

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LlamaIndex versions up to and including 0.12.2

Description LlamaIndex versions up to and including 0.12.2 have an issue where resource consumption is not properly controlled in the VannaPack VannaQueryEngine implementation. The custom query() logic constructs SQL statements from user input and executes them using vn.run sql() without limiting query execution. This allows an attacker, in deployments where untrusted users can provide prompts, to trigger resource-intensive or unbounded SQL operations, potentially leading to a denial-of-service condition by exhausting CPU or memory. The vulnerable code is located in llama index/packs/vanna/base.py within the custom query() function.

Recommendations Versions prior to and including 0.12.2 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-58339

PYSEC-2026-86

Affected Products

Llama Index

Vannapack

Vannaqueryengine

References · 9

• 🔥 https://huntr.com/bounties/a1d6c30d-fce0-412a-bd22-14e0d4c1fa1f · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-86 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-58339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58339 · Security Note
• https://github.com/run-llama/llama_index · Note
• https://vulncheck.com/advisories/llamaindex-vannaqueryengine-sql-execution-allows-resource-exhaustion · Note
• https://twitter.com/CVEnew/status/2010859146887963015 · Twitter Post
• https://llamaindex.ai · Note
• https://t.me/cveNotify/149427 · Telegram Post