CVE-2024-12909

The `run_sql_query` function in the `database_agent` module of the FinanceChatLlamaPack component does not validate or parameterize user-supplied input data, allowing arbitrary code to be embedded in the SQL query. An attacker can exploit the large object functionality available in PostgreSQL to write and execute malicious code on the server side, thereby gaining full control over the process. The attack requires no authentication or any user interaction (network vector, no required privileges).

An attacker can gain full control over the database and — through the RCE mechanism — execute arbitrary code on the server, threatening the confidentiality, integrity, and availability of the entire system.

The llama_index library should be updated to version 0.3.0 or newer, in which the bug has been fixed. Patch available in the project's GitHub repository (commit 5d03c175476452db9b8abcdb7d5767dd7b310a75). As a temporary measure, it is recommended to restrict access to the FinanceChatLlamaPack component and disable the ability to pass untrusted input data to the `run_sql_query` function.

Library run-llama/llama_index, FinanceChatLlamaPack component, versions up to and including v0.12.3.