A vulnerability was found in run-llama llama_index up to 10.25. It has been declared as very critical. This vulnerability affects the function safe_eval. The manipulation leads to command injection.

This vulnerability was named CVE-2024-3271. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.