CRITICALCVSS 9.8EPSS 0.8%

CVE-2025-1750

LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id

Published: 2025-06-02
Modified: 2026-10-02
EPSS percentile: 56%
Aliases: GHSA-6mcc-q3mg-3qg6
Sources: github-advisory

Summary

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	llama-index-vector-stores-duckdb	—	0.12.21

Remediation: Upgrade to 0.12.21 or later.

References

https://github.com/advisories/GHSA-6mcc-q3mg-3qg6

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.