CVE-2024-45201

Vulnerability

The vulnerability resides in the download/integration.py module of llama_index (now LlamaIndex) versions prior to 0.10.38. The file includes an exec call for import {cls_name} where cls_name is derived from user-controlled input without sanitization [1][2]. This directly embeds attacker-supplied strings into a Python exec statement, enabling arbitrary code execution.

Exploitation

No authentication or special network position is required if the application exposes any endpoint or functionality that processes integration names (e.g., through a package download or dynamic import feature). An attacker can supply a malicious cls_name containing Python code (e.g., os.system(...) or a payload that exfiltrates data) which will be executed by exec [1][4]. The fix, implemented in pull request #13523, removes the exec call entirely [2].

Impact

Successful exploitation gives the attacker arbitrary code execution in the context of the llama_index process. This can lead to full compromise of the affected system, including data theft, installation of backdoors, or lateral movement within the network [4]. No CVSS score is provided in the available references, but the vulnerability is critical due to the lack of preconditions.

Mitigation

Users should immediately upgrade to llama_index version 0.10.38 or later, where the exec has been removed [2][3]. No workarounds are described; upgrading is the only reliable mitigation.