CVE-2025-1750: SQL Injection in run-llama/llama_index

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-06-02 · updated 2026-06-17
Weakness: CWE-89

Description

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

Affected products

run-llama/llama_index: from 0.12.19 before 0.12.21 — fixed in 0.12.21

How to fix

Upgrade to a fixed version: run-llama/llama_index 0.12.21. Check the vendor advisory for mitigations.

References

https://github.com/run-llama/llama_index/commit/369a2942df2efcf6b74461c45d20a0af1fbe4ae2
https://huntr.com/bounties/e1302233-9180-4269-9047-1526247d2cd8

Get alerted when CVE-2025-1750 or the next vulnerability affects your stack