A vulnerability was found in run-llama llama_index up to 10.25. It has been declared as very critical. This vulnerability affects the function
safe_eval
. The manipulation leads to command injection.
This vulnerability was named CVE-2024-3271. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.