Platform
python
Component
llama_index
Fixed in
0.10.24
A critical Remote Code Execution (RCE) vulnerability (CVE-2024-3098) has been identified in LlamaIndex versions up to 0.10.24. This flaw stems from insufficient input validation within the safeeval function of the executils class, allowing attackers to inject malicious prompts. Successful exploitation can bypass method restrictions and lead to the execution of arbitrary code on the affected system, effectively creating a file.
The impact of CVE-2024-3098 is severe. An attacker can leverage prompt injection to execute arbitrary code, potentially gaining complete control over the system running LlamaIndex. This includes the ability to read, write, and execute files, install malware, and compromise sensitive data. The vulnerability bypasses previous mitigations for CVE-2023-39662, indicating a sophisticated attack surface. The demonstrated proof-of-concept involves creating files on the system, highlighting the potential for persistent compromise and data exfiltration. The blast radius extends to any application or service relying on vulnerable LlamaIndex instances.
CVE-2024-3098 is a high-priority vulnerability due to its CRITICAL CVSS score and the demonstrated proof-of-concept. It was publicly disclosed on April 10, 2024. The vulnerability bypasses previous mitigations for CVE-2023-39662, suggesting a potential for broader exploitation. No KEV listing or active exploitation campaigns have been publicly confirmed as of this writing, but the ease of exploitation and the severity of the impact warrant immediate attention.
Exploit Status
EPSS
0.19% (41% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2024-3098 is to immediately upgrade LlamaIndex to version 0.10.24 or later. If upgrading is not immediately feasible due to compatibility issues or breaking changes, consider implementing strict input validation and sanitization on all prompts passed to LlamaIndex. While a WAF or proxy cannot directly prevent prompt injection, they can be configured to detect and block suspicious patterns. Monitor system logs for unusual file creation activity or unexpected process executions. Review and restrict the permissions granted to the LlamaIndex process to minimize potential damage in case of exploitation.
Update the `llama_index` library to version 0.10.24 or higher. This will address the prompt injection vulnerability that allows for arbitrary code execution. Use the pip package manager to perform the update: `pip install llama_index --upgrade`.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2024-3098 is a critical Remote Code Execution vulnerability in LlamaIndex versions up to 0.10.24. It allows attackers to execute arbitrary code through prompt injection due to insufficient input validation.
You are affected if you are using LlamaIndex version 0.10.24 or earlier. Upgrade to 0.10.24 or later to mitigate the risk.
The recommended fix is to upgrade LlamaIndex to version 0.10.24 or later. If upgrading is not possible, implement strict input validation and sanitization.
While no active exploitation campaigns have been publicly confirmed, the vulnerability's severity and ease of exploitation suggest a high likelihood of future exploitation.
Refer to the LlamaIndex security advisory for detailed information and updates: [https://github.com/run-llama/llamaindex/security/advisories/GHSA-9835-5946-4997](https://github.com/run-llama/llamaindex/security/advisories/GHSA-9835-5946-4997)
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.
Upload your requirements.txt file and we'll tell you instantly if you're affected.