---
id: CVE-2025-1750
aliases:
  - PYSEC-2025-245
title: >-
  An SQL injection vulnerability exists in the delete function of
  DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnera…
summary: >-
  An SQL injection vulnerability exists in the delete function of
  DuckDBVectorStore in run-llama/llama_index version v0.12.19. This
  vulnerability allows an attacker to manipulate the ref_doc_id parameter,
  enabling them to read and write ar…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: llama-index
product: llama-index
ecosystem: pip
affected:
  - 'llama-index >= 0.12.19, < 0.12.21'
patched:
  - llama-index 0.12.21
published: '2025-06-02'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/PYSEC-2025-245'
references:
  - url: >-
      https://github.com/run-llama/llama_index/commit/369a2942df2efcf6b74461c45d20a0af1fbe4ae2
  - url: 'https://huntr.com/bounties/e1302233-9180-4269-9047-1526247d2cd8'
tags:
  - osv
  - pip
epss: 0.00817
epssPercentile: 0.55646
ingestedAt: '2026-07-13T18:58:06.681Z'
---

## Overview

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

## Affected packages

- `llama-index >= 0.12.19, < 0.12.21`

## Remediation

Upgrade to a patched release:

- `llama-index 0.12.21`