High severity7.8OSV Advisory· Published Jan 12, 2026· Updated Jul 14, 2026
CVE-2024-14021
CVE-2024-14021
Description
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4v0.10.0, v0.10.1, v0.10.10, …+ 1 more
- (no CPE)range: v0.10.0, v0.10.1, v0.10.10, …
- (no CPE)range: <=0.11.6
cpe:2.3:a:llamaindex:llamaindex:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:llamaindex:llamaindex:*:*:*:*:*:*:*:*range: <=0.11.6
- (no CPE)range: <=0.11.6
Patches
Vulnerability mechanics
References
3- huntr.com/bounties/ab4ceeb4-aa85-4d1c-aaca-4eda1b71fc12nvdExploitThird Party Advisory
- www.vulncheck.com/advisories/llamaindex-bgem3index-unsafe-deserializationnvdThird Party Advisory
- www.llamaindex.ainvdProduct
News mentions
0No linked articles in our index yet.