GHSA-6mcc-q3mg-3qg6

Suggest an improvement
Source
https://github.com/advisories/GHSA-6mcc-q3mg-3qg6
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-6mcc-q3mg-3qg6/GHSA-6mcc-q3mg-3qg6.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-6mcc-q3mg-3qg6
Aliases
Published
2025-06-02T12:30:33Z
Modified
2026-10-02T22:56:01Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
Details

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

Database specific 
{
    "cwe_ids":  [
        "CWE-89"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-10-02T22:38:36Z",
    "nvd_published_at":  "2025-06-02T10:15:20Z",
    "severity":  "CRITICAL"
}
References

Affected packages

PyPI / llama-index-vector-stores-duckdb

Package

Name
llama-index-vector-stores-duckdb
View open source insights on deps.dev
Purl
pkg:pypi/llama-index-vector-stores-duckdb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.12.19
Fixed
0.12.21

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-6mcc-q3mg-3qg6/GHSA-6mcc-q3mg-3qg6.json"